VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 7, 2006· Updated Apr 16, 2026

CVE-2006-4621

CVE-2006-4621

Description

PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The lib/config.php vector is already covered by CVE-2006-4531.

Affected products

2
  • Bare Concept Media/Pheap CMS2 versions
    cpe:2.3:a:bare_concept_media:pheap_cms:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bare_concept_media:pheap_cms:*:*:*:*:*:*:*:*range: <=1.2
    • cpe:2.3:a:bare_concept_media:pheap_cms:1.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.