CVE-2006-4059

no score yetEPSS 16%

Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) newsscript_lyt.php, (2) newsticker/newsscript_get.php, (3) inc/output/news_theme1.php, (4) inc/output/news_theme2.php, or (5) inc/output/news_theme3.php.

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2006-08-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

usolved:newsolved_lite

References

http://secunia.com/advisories/21395
http://securityreason.com/securityalert/1366
http://www.bb-pcsecurity.de/sicherheit_286.htm
http://www.osvdb.org/27836
http://www.osvdb.org/27837

Check your stack JSON