CVE-2005-4556

no score yetEPSS 11%

PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP files via a URL in the (1) lang_settings and (2) language parameters in (a) accounts/inc/include.php and (b) admin/inc/include.php.

EPSS: 11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
Published: 2005-12-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

deerfield:visnetic_mail_server
icewarp:web_mail
merak:mail_server

References

http://marc.info/?l=full-disclosure&m=113570229524828&w=2
http://secunia.com/advisories/17046
http://secunia.com/advisories/17865
http://secunia.com/secunia_research/2005-62/advisory/
http://securitytracker.com/id?1015412

Check your stack JSON