Unrated severityNVD Advisory· Published Nov 3, 2006· Updated Apr 23, 2026
CVE-2006-5671
CVE-2006-5671
Description
PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
1- cpe:2.3:a:free_php_scripts:free_image_hosting:*:*:*:*:*:*:*:*Range: <=1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.