CVE-2006-4609

Multiple PHP remote file inclusion vulnerabilities in the Content Management module ("Content manager") for PHProjekt 0.6.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the path_pre parameter in (1) cm_lib.inc.php, (2) doc/br.edithelp.php, (3) doc/de.edithelp.php, (4) doc/ct.edithelp.php, (5) userrating.php, and (6) listing.php, a different set of vectors than CVE-2006-4204. NOTE: a third-party researcher has disputed the impact of the cm_lib.inc.php vector, stating that it is limited to local file inclusion. CVE analysis as of 20060905 concurs, although use of ftp URLs is also possible. The remaining five vectors have also been disputed by the same third party, stating that the path_pre variable is initialized before it is used

• http://secunia.com/advisories/21590
• http://securityreason.com/securityalert/1495
• http://www.osvdb.org/28217
• http://www.securityfocus.com/archive/1/444076/100/100/threaded
• http://www.securityfocus.com/archive/1/444220/100/100/threaded
• http://www.vupen.com/english/advisories/2006/3373
• http://secunia.com/advisories/21590
• http://securityreason.com/securityalert/1495
• http://www.osvdb.org/28217
• http://www.securityfocus.com/archive/1/444076/100/100/threaded
• http://www.securityfocus.com/archive/1/444220/100/100/threaded
• http://www.vupen.com/english/advisories/2006/3373

Published

Sep 7, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4603NCH Swift Sound Web Dictate 1.02 allows remote attackers to …
• CVE-2006-4604PHP remote file inclusion vulnerability in LFXlib/access_man…
• CVE-2006-4605PHP remote file inclusion vulnerability in index.php in Long…
• CVE-2006-4606Multiple SQL injection vulnerabilities in Longino Jacome php…
• CVE-2006-4607admin/index.php in Longino Jacome php-Revista 1.1.2 allows r…
• CVE-2006-4608Multiple cross-site scripting (XSS) vulnerabilities in Longi…
• CVE-2006-4610PHP remote file inclusion vulnerability in index.php in Grap…
• CVE-2006-4611Buffer overflow in the _tor_resolve function in dsocks.c in …
• CVE-2006-4612SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12…
• CVE-2006-4613Multiple unspecified vulnerabilities in SnapGear before 3.1.…
• CVE-2006-4614PDAapps Verichat for Pocket PC 1.30bh stores usernames and p…
• CVE-2006-4615Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.…