CVE-2006-4677

PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the _REQUEST parameters were dynamically unset at the beginning of the file. Another researcher noted, and CVE agrees, that the unset PHP function can be bypassed (CVE-2006-3017). If this issue is due to a vulnerability in PHP, then it should be excluded from CVE

• http://phpopenchat.org/index.php
• http://www.securityfocus.com/archive/1/445384/100/0/threaded
• http://www.securityfocus.com/archive/1/445522/100/0/threaded
• http://www.securityfocus.com/archive/1/445580/100/0/threaded
• http://phpopenchat.org/index.php
• http://www.securityfocus.com/archive/1/445384/100/0/threaded
• http://www.securityfocus.com/archive/1/445522/100/0/threaded
• http://www.securityfocus.com/archive/1/445580/100/0/threaded

Published

Sep 11, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4671PHP remote file inclusion vulnerability in headlines.php in …
• CVE-2006-4672PHP remote file inclusion vulnerability in profitCode ppalCa…
• CVE-2006-4673Global variable overwrite vulnerability in maincore.php in P…
• CVE-2006-4674Direct static code injection vulnerability in doku.php in Do…
• CVE-2006-4675Unrestricted file upload vulnerability in lib/exe/media.php …
• CVE-2006-4676TIBCO RendezVous 7.4.11 and earlier logs base64-encoded user…
• CVE-2006-4678PHP remote file inclusion vulnerability in News Evolution 3.…
• CVE-2006-4679DokuWiki before 2006-03-09c enables the debug feature by def…
• CVE-2006-4680The Remote UI in Canon imageRUNNER includes usernames and pa…
• CVE-2006-4681Directory traversal vulnerability in Redirect.bat in IBM Dir…
• CVE-2006-4682Multiple unspecified vulnerabilities in IBM Director before …
• CVE-2006-4683IBM Director before 5.10 allows remote attackers to obtain s…