Back
CVE-2003-1086
PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pm_path parameter to reference a URL on a remote web server that contains the code.
Published: Jun 17, 2003
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (3)
| Vendor | Product | Version |
|---|---|---|
| pmachine | pmachine_free | * |
| pmachine | pmachine_pro | 2.2 |
| pmachine | pmachine_pro | 2.2.1 |
GitHub Security Advisory GHSA-9cvf-p2hf-c884
PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2...
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
2.21%
Top 19% most likely to be exploited
Threat Score
30.7 / 100
Data Sources
NVD
EPSS
GitHub