CVE-2008-7042: Freshscripts Fresh Email Script

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in url.php in FreshScripts Fresh Email Script 1.0 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the tmp_sid parameter.

Affected products

• Freshscripts Fresh Email Script: version 1.0 only; version 1.11 only

Published 2009-08-24. Last modified 2026-06-16.