CVE-2006-5671

no score yetEPSS 1.3%

PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
Published: 2006-11-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

free_php_scripts:free_image_hosting

References

http://www.vupen.com/english/advisories/2006/4229
http://www.vupen.com/english/advisories/2006/4229

Check your stack JSON