Unrated severityNVD Advisory· Published Aug 16, 2006· Updated Jun 16, 2026

CVE-2006-4156

Description

PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate before big.php uses pathtotemplate. CVE has not verified either claim, but during August 2006, the original researcher made several significant errors regarding this bug type

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pearlabs/Mafia Moblog2 versions
cpe:2.3:a:pearlabs:mafia_moblog:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pearlabs:mafia_moblog:*:*:*:*:*:*:*:*range: <=6
- (no CPE)range: <=6

Patches

Vulnerability mechanics

References

securityreason.com/securityalert/1391nvd
www.securityfocus.com/archive/1/442867/100/0/threadednvd
www.securityfocus.com/archive/1/443153/100/0/threadednvd
www.securityfocus.com/bid/19458nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000