Unrated severityNVD Advisory· Published Aug 10, 2006· Updated Jun 16, 2026
CVE-2006-4065
CVE-2006-4065
Description
Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter to (a) usr/extensions/get_calendar.inc.php or the (2) GLOBALS[root_path] parameter to (b) usr/extensions/get_tree.inc.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:dmitry_sheiko:sapid_gallery:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dmitry_sheiko:sapid_gallery:*:*:*:*:*:*:*:*range: <=1.0
- (no CPE)range: <=1.0
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.