CVE-2006-4437

Eval injection vulnerability in Tagger LE allows remote attackers to execute arbitrary PHP code via the query string in (1) tags.php, (2) sign.php, and (3) admin/index.php.

• http://secunia.com/advisories/21449Exploit, Vendor Advisory
• http://secunia.com/secunia_research/2006-62/advisory/Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1584
• http://www.osvdb.org/28755
• http://www.osvdb.org/28756
• http://www.osvdb.org/28757
• http://www.securityfocus.com/archive/1/446010/100/0/threaded
• http://www.securityfocus.com/bid/20023
• http://www.vupen.com/english/advisories/2006/3606
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28941
• http://secunia.com/advisories/21449Exploit, Vendor Advisory
• http://secunia.com/secunia_research/2006-62/advisory/Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1584
• http://www.osvdb.org/28755
• http://www.osvdb.org/28756
• http://www.osvdb.org/28757
• http://www.securityfocus.com/archive/1/446010/100/0/threaded
• http://www.securityfocus.com/bid/20023
• http://www.vupen.com/english/advisories/2006/3606
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28941

Published

Sep 14, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4431Multiple buffer overflows in the (a) Session Clustering Daem…
• CVE-2006-4432Directory traversal vulnerability in Zend Platform 2.2.1 and…
• CVE-2006-4433PHP before 4.4.3 and 5.x before 5.1.4 does not limit the cha…
• CVE-2006-4434Use-after-free vulnerability in Sendmail before 8.13.8 allow…7.5
• CVE-2006-4435OpenBSD 3.8, 3.9, and possibly earlier versions allows conte…
• CVE-2006-4436isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, …
• CVE-2006-4438Heap-based buffer overflow in SpIDer for Dr.Web Scanner for …
• CVE-2006-4439pkgadd in Sun Solaris 10 before 20060825 installs files with…
• CVE-2006-4440PHP remote file inclusion vulnerability in main.php in Ay Sy…
• CVE-2006-4441Multiple PHP remote file inclusion vulnerabilities in Ay Sys…
• CVE-2006-4442Cross-site scripting (XSS) vulnerability in PHP iAddressBook…
• CVE-2006-4443PHP remote file inclusion vulnerability in myajaxphp.php in …