CVE-2006-5841: Dodos Scripts Dodosmail

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dodosmail_header_file or (2) dodosmail_footer_file parameters.

Affected products

• Dodos Scripts Dodosmail: up to and including 2.1; version 2.0 only; version 2.0.1 only

Published 2006-11-10. Last modified 2026-06-16.