CVE-2006-4944

ProgSys <0.151 - RCE

Title source: llm

Description

PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdns_basedir parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kacper · perlwebappsphp

https://www.exploit-db.com/exploits/2411

View Code ZIP pw:eip

References (3)

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/29078

[Exploit] http://www.securityfocus.com/bid/20141

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2411

Scores

EPSS 0.0234

EPSS Percentile 84.9%

Details

CWE

CWE-94

Status published

Products (1)

boesch_it-consulting/progsys < 0.151

Published Sep 23, 2006

Tracked Since Feb 18, 2026