CVE-2010-4939

PHP <MailForm 1.2 - RCE

Title source: llm
STIX 2.1

Description

PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.

Exploits (1)

exploitdb WORKING POC
by LoSt.HaCkEr · textwebappsphp
https://www.exploit-db.com/exploits/14639

References (1)

Core 1
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/14639

Scores

EPSS 0.0061
EPSS Percentile 69.8%

Details

CWE
CWE-94
Status published
Products (1)
scripts.bdr130/mailform 1.2
Published Oct 09, 2011
Tracked Since Feb 18, 2026