CVE-2006-4440

no score yetEPSS 8.3%

ay system solutions ay system solutions cms: no CVSS score yet. EPSS 8.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path[ShowProcessHandle] parameter.

EPSS: 8.3% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
Published: 2006-08-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ay_system_solutions:ay_system_solutions_cms

References

http://aysad.net/download/logs/WCSv2.7_upgrades.log
http://secunia.com/advisories/21661
http://www.osvdb.org/28245
http://www.securityfocus.com/bid/19735
http://www.vupen.com/english/advisories/2006/3394

Check your stack JSON