CVE-2003-1086 PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pm_path parameter to re...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pm_path parameter to reference a URL on a remote web server that contains the code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pmachine free | All versions | No fix listed |
| pmachine pro | = 2.2 | No fix listed |
| pmachine pro | = 2.2.1 | No fix listed |
References
- 20030623 pMachine (PHP) : Include() Security Hole mailing-list
- www.pmachine.com patch