Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-58302. PoCs published by Chokri Hammedi.
AI-analyzed exploit summary This is a writeup describing a Local File Inclusion (LFI) vulnerability in FoF Pretty Mail 1.1.2. It explains how an attacker with administrative access can include sensitive files in email templates, leading to information disclosure.
Description
FoF Pretty Mail 1.1.2 contains a local file inclusion vulnerability that allows administrative users to include arbitrary server files in email templates. Attackers can exploit the template settings by inserting file inclusion payloads to read sensitive system files like /etc/passwd during email generation.
Exploits (1)
This is a writeup describing a Local File Inclusion (LFI) vulnerability in FoF Pretty Mail 1.1.2. It explains how an attacker with administrative access can include sensitive files in email templates, leading to information disclosure.
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N