CVE-2006-4073

CVE Database · CVE-2006-4073

CVE-2006-4073

· N/AModified

CVSS v3.1

N/A

EPSS

3.16%

Published

Aug 10, 2006

Modified

Apr 15, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBphpCC 4.2 Beta - 'base_dir' Remote File Inclusion TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter to (1) login.php, (2) reactivate.php, or (3) register.php.

Affected Products (1)

phpcc · phpccvulnerable

References (12)

http://www.securityfocus.com/archive/1/442428/100/0/threaded

http://www.securityfocus.com/bid/19376

Exploit

http://www.solpotcrew.org/adv/solpot-adv-05.txt

http://www.vupen.com/english/advisories/2006/3199

https://exchange.xforce.ibmcloud.com/vulnerabilities/28259

https://www.exploit-db.com/exploits/2134