Unrated severityNVD Advisory· Published Sep 19, 2006· Updated Jun 16, 2026

CVE-2006-4885

Description

PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) footer.php and (2) header.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The bottom.php parameter is already covered by CVE-2006-4826.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Shadowed Portal/Portal
cpe:2.3:a:shadowed_portal:shadowed_portal:*:*:*:*:*:*:*:*
Range: <=5.599

Patches

Vulnerability mechanics

References

secunia.com/advisories/21920nvd
www.osvdb.org/28836nvd
www.osvdb.org/28837nvd
www.securityfocus.com/bid/84177nvd
www.vupen.com/english/advisories/2006/3629nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000