CVE-2006-4768
Last modified
CVE-2006-4768 is a vulnerability of currently unknown severity. Multiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via the (1) description, (2) issue, (3) title, (4) var, (5) name, (6) keywords, and (7) note parameters, which are stored in an article file. NOTE: the original source of this vulnerability is unknown; the details are obtained from third party information and CVE post-disclosure analysis.. EPSS estimates a 1.29% chance of exploitation in the next 30 days.
Description
Multiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via the (1) description, (2) issue, (3) title, (4) var, (5) name, (6) keywords, and (7) note parameters, which are stored in an article file. NOTE: the original source of this vulnerability is unknown; the details are obtained from third party information and CVE post-disclosure analysis.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Stefan Ernst | Newsscript | 0.5_beta |
References
- http://secunia.com/advisories/21826Vendor Advisory
- http://secunia.com/advisories/21826Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-4768?
How severe is CVE-2006-4768?
How do I fix CVE-2006-4768?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-4762Multiple cross-site scripting (XSS) vulnerabilities in Ykoon…
- CVE-2006-4763IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a cl…
- CVE-2006-4764PHP remote file inclusion vulnerability in common.php in Tho…
- CVE-2006-4765NETGEAR DG834GT Wireless ADSL router running firmware 1.01.2…
- CVE-2006-4766Directory traversal vulnerability in print.php in Stefan Ern…
- CVE-2006-4767Multiple directory traversal vulnerabilities in Stefan Ernst…
- CVE-2006-4769PHP remote file inclusion vulnerability in abf_js.php in p4C…
- CVE-2006-4770PHP remote file inclusion vulnerability in menu.php in MiniP…
- CVE-2006-4771Cross-site scripting (XSS) vulnerability in haut.php in Foru…
- CVE-2006-4772HotPlug CMS stores sensitive information under the web root …
- CVE-2006-4773Sun StorEdge 6130 Array Controllers with firmware 06.12.10.1…
- CVE-2006-4774The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(1…
Are you affected by CVE-2006-4768?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST