CVE-2005-4556 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 10.6% (pctl 96)
Patch early
A public exploit exists.
Description
PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the (1) lang_settings and (2) language parameters in (a) accounts/inc/include.php and (b) admin/inc/include.php.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 10.57% — more likely to be exploited than 96% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-12-28 |
| Last modified | 2026-06-16 |
Affected (3)
| Vendor | Product |
|---|---|
| deerfield | visnetic mail server |
| icewarp | web mail |
| merak | mail server |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | IceWarp Universal WebMail - '/accounts/inc/include.php' Multiple Remote File Inclusions | 2005-12-27 |
| exploit-db | IceWarp Universal WebMail - '/admin/inc/include.php' Multiple Remote File Inclusions | 2005-12-27 |
References
- http://marc.info/?l=full-disclosure&m=113570229524828&w=2
- http://secunia.com/advisories/17046
- http://secunia.com/advisories/17865
- http://secunia.com/secunia_research/2005-62/advisory/
- http://securitytracker.com/id?1015412
- http://www.osvdb.org/22077
- http://www.osvdb.org/22078
- http://www.securityfocus.com/archive/1/420255/100/0/threaded
- http://www.securityfocus.com/bid/16069
- http://marc.info/?l=full-disclosure&m=113570229524828&w=2
- http://secunia.com/advisories/17046
- http://secunia.com/advisories/17865
- http://secunia.com/secunia_research/2005-62/advisory/
- http://securitytracker.com/id?1015412
- http://www.osvdb.org/22077
- http://www.osvdb.org/22078
- http://www.securityfocus.com/archive/1/420255/100/0/threaded
- http://www.securityfocus.com/bid/16069
→ the Explorer · watch your stack · NVD