CVE-2010-4939: scripts.bdr130 Mailform

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter.

Affected products

• scripts.bdr130 Mailform: version 1.2 only

Published 2011-10-09. Last modified 2026-06-16.