CVE-2006-4738

no score yetEPSS 1.5%

PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter. NOTE: The relative_script_path vector is already covered by CVE-2006-2270.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
Published: 2006-09-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

jetbox:jetbox_cms

References

http://securityreason.com/securityalert/1562
http://www.securityfocus.com/archive/1/445652/100/0/threaded
http://www.securityfocus.com/bid/19303
https://exchange.xforce.ibmcloud.com/vulnerabilities/28843
http://securityreason.com/securityalert/1562

Check your stack JSON