VYPR

Webmail

by Nuralstorm

CVEs (1)

  • CVE-2006-5386Oct 18, 2006
    risk 0.03cvss epss 0.03

    PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DEFAULT_SKIN parameter.