CVE-2006-4621 - PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter

Published Sep 7, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.29%

Description

PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The lib/config.php vector is already covered by CVE-2006-4531.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://secunia.com/advisories/21678
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2006/3426
vdb-entryx_refsource_VUPEN

Link	Providers	Tags
http://secunia.com/advisories/21678		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2006/3426		vdb-entryx_refsource_VUPEN

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 7, 2006

Updated Aug 7, 2024

Reserved Sep 6, 2006

Link CVE-2006-4621

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-4621

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-4621