CVE-2006-4287

NES Game and NES System - Remote File Inclusion via PHPHTMllib Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4287. PoCs published by Kacper.

AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in NES Game & NES System (phphtmllib) by injecting a remote URL into the 'phphtmllib' parameter. It allows an attacker to execute arbitrary PHP code by including a malicious script from an external server.

Description

Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) phphtmllib parameter to (a) phphtmllib/includes.php; tag_utils/ scripts including (b) divtag_utils.php, (c) form_utils.php, (d) html_utils.php, and (e) localinc.php; and widgets/ scripts including (f) FooterNav.php, (g) HTMLPageClass.php, (h) InfoTable.php, (i) localinc.php, (j) NavTable.php, and (k) TextNav.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Kacper · textwebappsphp
https://www.exploit-db.com/exploits/2226

This exploit demonstrates a remote file inclusion vulnerability in NES Game & NES System (phphtmllib) by injecting a remote URL into the 'phphtmllib' parameter. It allows an attacker to execute arbitrary PHP code by including a malicious script from an external server.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: NES Game & NES System <= c108122 (phphtmllib)
No auth needed
Prerequisites: Remote server hosting malicious PHP script · Network access to the vulnerable application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (17)

Core 17
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28044
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28045
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28054
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28049
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28053
Exploit, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21593
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28052
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3339
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28486
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28047
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28048
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28051
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28050
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/2226
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19611
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/28046

Scores

EPSS 0.0998
EPSS Percentile 95.0%

Details

Status published
Products (2)
nes_game/nes_game c108122
nes_system/nes_system c108122
Published Aug 22, 2006
Tracked Since Feb 18, 2026