Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-4939. PoCs published by LoSt.HaCkEr.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in MailForm v1.2. The vulnerability allows an attacker to include arbitrary remote files via the 'theme' parameter in the index.php script.
Description
PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.
Exploits (1)
exploitdb
WORKING POC
by LoSt.HaCkEr · textwebappsphp
https://www.exploit-db.com/exploits/14639
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in MailForm v1.2. The vulnerability allows an attacker to include arbitrary remote files via the 'theme' parameter in the index.php script.
Classification
Working Poc 80%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target:
MailForm v1.2
No auth needed
Prerequisites:
Remote file inclusion must be enabled on the target server · Attacker must be able to reach the target server
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Exploit exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/14639
Scores
EPSS
0.0210
EPSS Percentile
79.2%
Details
CWE
CWE-94
Status
published
Products (1)
scripts.bdr130/mailform
1.2
Published
Oct 09, 2011
Tracked Since
Feb 18, 2026