CVE-2006-5841

DodosMail < 2.1 - Remote File Inclusion via dodosmail_header_file or dodosmail_footer_file Parameters

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-5841. PoCs published by Cold Zero.

AI-analyzed exploit summary This exploit demonstrates a Remote File Include (RFI) vulnerability in DodosMail <= 2.0.1, allowing an attacker to include arbitrary remote files via the 'dodosmail_header_file' or 'dodosmail_footer_file' parameters in dodosmail.php.

Description

Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dodosmail_header_file or (2) dodosmail_footer_file parameters.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Cold Zero · textwebappsphp

https://www.exploit-db.com/exploits/2742

View Code ZIP pw:eip

This exploit demonstrates a Remote File Include (RFI) vulnerability in DodosMail <= 2.0.1, allowing an attacker to include arbitrary remote files via the 'dodosmail_header_file' or 'dodosmail_footer_file' parameters in dodosmail.php.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: DodosMail <= 2.0.1

No auth needed

Prerequisites: PHP remote file inclusion enabled on the target server · Network access to the target application

MITRE ATT&CK