Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code via a URL in the…

Description

Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter in (1) addfav.php, (2) adm-admlog.php, (3) adm-approve.php, (4) adm-backup.php, (5) adm-cats.php, (6) adm-cinc.php, (7) adm-db.php, (8) adm-editcfg.php, (9) adm-inc.php, (10) adm-index.php, (11) adm-modcom.php, (12) adm-move.php, (13) adm-options.php, (14) adm-order.php, (15) adm-pa.php, (16) adm-photo.php, (17) adm-purge.php, (18) adm-style.php, (19) adm-templ.php, (20) adm-userg.php, (21) adm-users.php, (22) bulkupload.php, (23) cookies.php, (24) comments.php, (25) ecard.php, (26) editphoto.php, (27) register.php, (28) showgallery.php, (29) showmembers.php, (30) useralbums.php, (31) uploadphoto.php, (32) search.php, or (33) adm-menu.php, different vectors than CVE-2006-4828.

Scores

EPSS (exploitation in 30 days)

4.3% · top 8.9% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (32)

• 32240 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32253 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32233 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32247 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32230 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32252 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32245 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32223 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32250 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32227 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32237 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 20060918 PhotoPost PHP 4.6 - 4.5 [PP_PATH] >> Remote File Include Vulnerability (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 32222 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32248 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32231 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32246 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32228 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32221 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32232 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32234 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32249 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 1632 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
• 32239 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32235 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32229 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32226 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32236 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32243 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32224 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32251 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32238 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 32225 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2006-4990](https://trackcve.app/badge/CVE-2006-4990.svg)](https://trackcve.app/cve/CVE-2006-4990)

Record last updated 7 Aug 2024, 19:32 UTC.