ByteOS Network

NVD Vulnerability Details :

CVE-2006-4990

Deferred

Source-cve@mitre.org

Published At-26 Sep, 2006 | 02:07

Updated At-03 Apr, 2025 | 01:03

Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter in (1) addfav.php, (2) adm-admlog.php, (3) adm-approve.php, (4) adm-backup.php, (5) adm-cats.php, (6) adm-cinc.php, (7) adm-db.php, (8) adm-editcfg.php, (9) adm-inc.php, (10) adm-index.php, (11) adm-modcom.php, (12) adm-move.php, (13) adm-options.php, (14) adm-order.php, (15) adm-pa.php, (16) adm-photo.php, (17) adm-purge.php, (18) adm-style.php, (19) adm-templ.php, (20) adm-userg.php, (21) adm-users.php, (22) bulkupload.php, (23) cookies.php, (24) comments.php, (25) ecard.php, (26) editphoto.php, (27) register.php, (28) showgallery.php, (29) showmembers.php, (30) useralbums.php, (31) uploadphoto.php, (32) search.php, or (33) adm-menu.php, different vectors than CVE-2006-4828.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

photopost>>photopost_php_pro>>4.5

cpe:2.3:a:photopost:photopost_php_pro:4.5:*:*:*:*:*:*:*

photopost>>photopost_php_pro>>4.6

cpe:2.3:a:photopost:photopost_php_pro:4.6:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://securityreason.com/securityalert/1632	cve@mitre.org	N/A
http://www.osvdb.org/32221	cve@mitre.org	N/A
http://www.osvdb.org/32222	cve@mitre.org	N/A
http://www.osvdb.org/32223	cve@mitre.org	N/A
http://www.osvdb.org/32224	cve@mitre.org	N/A
http://www.osvdb.org/32225	cve@mitre.org	N/A
http://www.osvdb.org/32226	cve@mitre.org	N/A
http://www.osvdb.org/32227	cve@mitre.org	N/A
http://www.osvdb.org/32228	cve@mitre.org	N/A
http://www.osvdb.org/32229	cve@mitre.org	N/A
http://www.osvdb.org/32230	cve@mitre.org	N/A
http://www.osvdb.org/32231	cve@mitre.org	N/A
http://www.osvdb.org/32232	cve@mitre.org	N/A
http://www.osvdb.org/32233	cve@mitre.org	N/A
http://www.osvdb.org/32234	cve@mitre.org	N/A
http://www.osvdb.org/32235	cve@mitre.org	N/A
http://www.osvdb.org/32236	cve@mitre.org	N/A
http://www.osvdb.org/32237	cve@mitre.org	N/A
http://www.osvdb.org/32238	cve@mitre.org	N/A
http://www.osvdb.org/32239	cve@mitre.org	N/A
http://www.osvdb.org/32240	cve@mitre.org	N/A
http://www.osvdb.org/32243	cve@mitre.org	N/A
http://www.osvdb.org/32245	cve@mitre.org	N/A
http://www.osvdb.org/32246	cve@mitre.org	N/A
http://www.osvdb.org/32247	cve@mitre.org	N/A
http://www.osvdb.org/32248	cve@mitre.org	N/A
http://www.osvdb.org/32249	cve@mitre.org	N/A
http://www.osvdb.org/32250	cve@mitre.org	N/A
http://www.osvdb.org/32251	cve@mitre.org	N/A
http://www.osvdb.org/32252	cve@mitre.org	N/A
http://www.osvdb.org/32253	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/446224/100/0/threaded	cve@mitre.org	N/A
http://securityreason.com/securityalert/1632	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32221	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32222	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32223	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32224	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32225	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32226	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32227	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32228	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32229	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32230	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32231	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32232	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32233	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32234	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32235	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32236	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32237	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32238	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32239	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32240	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32243	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32245	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32246	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32247	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32248	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32249	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32250	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32251	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32252	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/32253	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/446224/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History