CVE-2003-1086: Pmachine Free

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pm_path parameter to reference a URL on a remote web server that contains the code.

Affected products

• Pmachine Pmachine Free: any version
• Pmachine Pmachine Pro: version 2.2 only; version 2.2.1 only

Published 2003-06-17. Last modified 2026-06-16.