CVE-2006-4287

N/A Unknown

Published: August 22, 2006 Modified: April 16, 2026

Description

Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) phphtmllib parameter to (a) phphtmllib/includes.php; tag_utils/ scripts including (b) divtag_utils.php, (c) form_utils.php, (d) html_utils.php, and (e) localinc.php; and widgets/ scripts including (f) FooterNav.php, (g) HTMLPageClass.php, (h) InfoTable.php, (i) localinc.php, (j) NavTable.php, and (k) TextNav.php.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://secunia.com/advisories/21593

Source: cve@mitre.org

Exploit Vendor Advisory

http://www.osvdb.org/28044

Source: cve@mitre.org

http://www.osvdb.org/28045

Source: cve@mitre.org

http://www.osvdb.org/28046

Source: cve@mitre.org

http://www.osvdb.org/28047

Source: cve@mitre.org

http://www.osvdb.org/28048

Source: cve@mitre.org

http://www.osvdb.org/28049

Source: cve@mitre.org

http://www.osvdb.org/28050

Source: cve@mitre.org

http://www.osvdb.org/28051

Source: cve@mitre.org

http://www.osvdb.org/28052

Source: cve@mitre.org

http://www.osvdb.org/28053

Source: cve@mitre.org

http://www.osvdb.org/28054

Source: cve@mitre.org

http://www.rahim.webd.pl/exploity/Exploits/61.html

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/19611

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/3339

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28486

Source: cve@mitre.org

https://www.exploit-db.com/exploits/2226

Source: cve@mitre.org

http://secunia.com/advisories/21593