Unrated severityNVD Advisory· Published Sep 26, 2006· Updated Jun 16, 2026
CVE-2006-4993
CVE-2006-4993
Description
Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _AMGconfig[cfg_serverpath] parameter in (1) modules/AllMyGuests/signin.php (aka the Nuke module) and (2) AllMyGuests/signin.php (aka the standalone).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:allmyguests_project:allmyguests:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:allmyguests_project:allmyguests:*:*:*:*:*:*:*:*range: <=0.4.1
- (no CPE)range: <=0.4.1
Patches
Vulnerability mechanics
References
5- www.securityfocus.com/bid/20303nvdThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/2405nvdThird Party AdvisoryVDB Entry
- secunia.com/advisories/22095nvdBroken Link
- www.vupen.com/english/advisories/2006/3863nvdPermissions Required
- exchange.xforce.ibmcloud.com/vulnerabilities/29064nvdVDB Entry
News mentions
0No linked articles in our index yet.