VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 8, 2007· Updated Jun 16, 2026

CVE-2006-6975

CVE-2006-6975

Description

PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.3 allows remote attackers to execute arbitrary code via a URL in the class_pwd parameter. NOTE: this issue has been disputed by CVE and multiple third parties, who state that $class_pwd is set to a static value before the relevant include statement

Affected products

2
  • Centipaid/Centipaid2 versions
    cpe:2.3:a:centipaid:centipaid:1.4.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:centipaid:centipaid:1.4.3:*:*:*:*:*:*:*
    • (no CPE)range: = 1.4.3

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.