Mailform · Mailform · CVE-2010-4939
**Name of the Vulnerable Software and Affected Versions**
MailForm version 1.2
**Description**
The issue allows remote attackers to execute arbitrary PHP code via a URL in the `theme` parameter in the index.php file.
**Recommendations**
For MailForm version 1.2, consider restricting access to the index.php file or validating the `theme` parameter to prevent remote file inclusion attacks until a patch is available.