VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 28, 2005· Updated Jun 16, 2026

CVE-2005-4556

CVE-2005-4556

Description

PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the (1) lang_settings and (2) language parameters in (a) accounts/inc/include.php and (b) admin/inc/include.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Alt N/Visnetic Mail Server
    cpe:2.3:a:deerfield:visnetic_mail_server:8.3.0_build1:*:*:*:*:*:*:*
  • IceWarp/WebMail2 versions
    cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:icewarp:web_mail:5.5.1:*:*:*:*:*:*:*
    • (no CPE)range: =5.5.1
  • Merak/Mail Server2 versions
    cpe:2.3:a:merak:mail_server:8.3.0r:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:merak:mail_server:8.3.0r:*:*:*:*:*:*:*
    • (no CPE)range: =8.3.0r
  • Visnetic/VisNetic Mail Serverllm-create
    Range: =8.3.0 build 1

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.