CVE-2006-4637

Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter in (1) header.php or (2) news.php. NOTE: portions of these details are obtained from third party information.

• CWE-94

• http://secunia.com/advisories/21765Exploit, Vendor Advisory
• http://securitytracker.com/id?1016816
• http://www.securityfocus.com/archive/1/445575/100/0/threaded
• http://www.securityfocus.com/bid/19863
• http://www.vupen.com/english/advisories/2006/3475Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28763
• http://secunia.com/advisories/21765Exploit, Vendor Advisory
• http://securitytracker.com/id?1016816
• http://www.securityfocus.com/archive/1/445575/100/0/threaded
• http://www.securityfocus.com/bid/19863
• http://www.vupen.com/english/advisories/2006/3475Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28763

Published

Sep 8, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4631Direct static code injection vulnerability in admin/save_opt…
• CVE-2006-4632Multiple SQL injection vulnerabilities in SoftBB 0.1, and po…
• CVE-2006-4633index.php in SoftBB 0.1, and possibly earlier, allows remote…
• CVE-2006-4634Cross-site scripting (XSS) vulnerability in index.php in VBZ…
• CVE-2006-4635Unspecified vulnerability in MySource Classic 2.14.6, and po…
• CVE-2006-4636Directory traversal vulnerability in SZEWO PhpCommander 3.0 …
• CVE-2006-4638PHP remote file inclusion vulnerability in article.php in AC…
• CVE-2006-4639Multiple PHP remote file inclusion vulnerabilities in C-News…
• CVE-2006-4640Unspecified vulnerability in Adobe Flash Player before 9.0.1…
• CVE-2006-4641SQL injection vulnerability in kategori.asp in Muratsoft Hab…
• CVE-2006-4642AuditWizard 6.3.2, when using "Remote Audit," logs the admin…
• CVE-2006-4643SQL injection vulnerability in consult/joueurs.php in Uni-Ve…