Unrated severityNVD Advisory· Published Aug 10, 2006· Updated Jun 16, 2026
CVE-2006-4052
CVE-2006-4052
Description
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) admin/index.php, (2) admin/adminindex.php, (3) admin/adminglobal.php, (4) admin/login.php, (5) admin/menu.php or (6) admin/header.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:turnkey_web_tools:php_simple_shop:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:turnkey_web_tools:php_simple_shop:*:*:*:*:*:*:*:*range: <=2.0
- (no CPE)range: <=2.0
Patches
Vulnerability mechanics
References
13- advisories.echo.or.id/adv/adv44-matdhule-2006.txtnvdExploitVendor Advisory
- secunia.com/advisories/21371nvdVendor Advisory
- securitytracker.com/idnvd
- www.osvdb.org/27800nvd
- www.osvdb.org/27801nvd
- www.osvdb.org/27802nvd
- www.osvdb.org/27803nvd
- www.osvdb.org/27804nvd
- www.osvdb.org/27805nvd
- www.securityfocus.com/archive/1/442422/100/100/threadednvd
- www.vupen.com/english/advisories/2006/3171nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28247nvd
- www.exploit-db.com/exploits/2119nvd
News mentions
0No linked articles in our index yet.