PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the (1) lang_settings and (2) language parameters in (a) accounts/inc/include.php and (b) admin/inc/include.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-12-28T11:00:00

Updated: 2024-08-07T23:46:05.539Z

Reserved: 2005-12-28T00:00:00

Link: CVE-2005-4556

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2005-12-28T11:03:00.000

Modified: 2024-11-21T00:04:34.963

Link: CVE-2005-4556

cve-icon Redhat

No data.