CVE-2006-4720 - CVE House
Back to Database
Status published High CVE-2006-4720

PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006...

Vulnerability Description

PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4720

Credits & Attribution

No credits recorded in the NVD database.

References

More from mcgallery

View All →
CVE-2007-1478
download.php in McGallery 0.5b allows remote attackers to read arbitrary...
Medium 5
CVE-2005-4251
Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier...
High 7.5
CVE-2005-4250
Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows...
Medium 5
CVE-2005-1998
Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote...
Medium 5
CVE-2005-1997
show.php in McGallery 1.1 allows remote attackers to connect to...
Medium 5

Affected Vendor

Affected Software

mcgallery pro
Vulnerable Versions:
2.2, 2006

Timeline

Official Publish: September 12th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.