CVE-2006-0075 – PHPBook 1.x - Mail Field PHP Code Injection

https://notcve.org/view.php?id=CVE-2006-0075

04 Jan 2006 — Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field (mail variable) in a new message, which is written to a PHP file. • https://www.exploit-db.com/exploits/26999 •