VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 19, 2006· Updated Jun 16, 2026

CVE-2006-0786

CVE-2006-0786

Description

Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, allows remote attackers to conduct PHP remote file include attacks via a path parameter that specifies a (1) UNC share or (2) ftps URL, which bypasses the check for "http://", "ftp://", and "https://" URLs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Phpkit/Phpkit2 versions
    cpe:2.3:a:phpkit:phpkit:*:rc2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:phpkit:phpkit:*:rc2:*:*:*:*:*:*range: <=1.6.1
    • (no CPE)range: <=1.6.1 Release 2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.