CVE-2006-4621

no score yetEPSS 1.3%

PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The lib/config.php vector is already covered by CVE-2006-4531.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published: 2006-09-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bare_concept_media:pheap_cms

References

http://secunia.com/advisories/21678
http://www.vupen.com/english/advisories/2006/3426
http://secunia.com/advisories/21678
http://www.vupen.com/english/advisories/2006/3426

Check your stack JSON