CVE-2006-4750

PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the config[openi_dir] parameter.

• http://bb.domaindlx.com/bingung/shellcore/advisories.asp?bug_report=display&infamous_group=103Exploit, Vendor Advisory
• http://secunia.com/advisories/21874Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/19952Exploit
• http://www.vupen.com/english/advisories/2006/3556
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28859
• https://www.exploit-db.com/exploits/2344
• http://bb.domaindlx.com/bingung/shellcore/advisories.asp?bug_report=display&infamous_group=103Exploit, Vendor Advisory
• http://secunia.com/advisories/21874Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/19952Exploit
• http://www.vupen.com/english/advisories/2006/3556
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28859
• https://www.exploit-db.com/exploits/2344

Published

Sep 13, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4744Abidia (1) O-Anywhere and (2) Abidia Wireless transmit authe…
• CVE-2006-4745ScaryBear PocketExpense Pro 3.9.1 uses an internally recorde…
• CVE-2006-4746PHP remote file inclusion vulnerability in news/include/cust…
• CVE-2006-4747Multiple cross-site scripting (XSS) vulnerabilities in IdevS…
• CVE-2006-4748Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1…
• CVE-2006-4749Multiple PHP remote file inclusion vulnerabilities in PHP Ad…
• CVE-2006-4751Cross-site scripting (XSS) vulnerability in index.php in Lau…
• CVE-2006-4752Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows …
• CVE-2006-4753Directory traversal vulnerability in index.php in PHProg bef…
• CVE-2006-4754Cross-site scripting (XSS) vulnerability in index.php in PHP…
• CVE-2006-4755Cross-site scripting (XSS) vulnerability in alpha.php in php…
• CVE-2006-4756SQL injection vulnerability in alpha.php in phpMyDirectory 1…