CVE-2006-4065

no score yetEPSS 2.4%

dmitry sheiko sapid gallery: no CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter to (a) usr/extensions/get_calendar.inc.php or the (2) GLOBALS[root_path] parameter to (b) usr/extensions/get_tree.inc.php.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
Published: 2006-08-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dmitry_sheiko:sapid_gallery

References

http://secunia.com/advisories/21413
http://www.vupen.com/english/advisories/2006/3197
https://exchange.xforce.ibmcloud.com/vulnerabilities/28254
https://www.exploit-db.com/exploits/2130
http://secunia.com/advisories/21413

Check your stack JSON