CVE-2006-4609 - CVE House
Back to Database
Status published Medium CVE-2006-4609

Multiple PHP remote file inclusion vulnerabilities in the Content Management...

Vulnerability Description

Multiple PHP remote file inclusion vulnerabilities in the Content Management module ("Content manager") for PHProjekt 0.6.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the path_pre parameter in (1) cm_lib.inc.php, (2) doc/br.edithelp.php, (3) doc/de.edithelp.php, (4) doc/ct.edithelp.php, (5) userrating.php, and (6) listing.php, a different set of vectors than CVE-2006-4204. NOTE: a third-party researcher has disputed the impact of the cm_lib.inc.php vector, stating that it is limited to local file inclusion. CVE analysis as of 20060905 concurs, although use of ftp URLs is also possible. The remaining five vectors have also been disputed by the same third party, stating that the path_pre variable is initialized before it is used

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4609

Credits & Attribution

No credits recorded in the NVD database.

References

More from phpprojekt

View All →
CVE-2007-1639
Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is...
Medium 4.6
CVE-2007-1638
Multiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken function...
Medium 6.8
CVE-2002-0451
filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to...
High 7.5
CVE-2001-0995
PHProjekt before 2.4a allows remote attackers to perform actions as...
High 7.5

Affected Vendor

Affected Software

phpprojekt
Vulnerable Versions:
0.6.1

Timeline

Official Publish: September 7th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.