CVE-2006-7091

phpht Topsites FREE 1.022b - RCE

Title source: llm
STIX 2.1

Description

PHP remote file inclusion vulnerability in config.php in phpht Topsites FREE 1.022b allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Le CoPrA · textwebappsphp
https://www.exploit-db.com/exploits/28791

References (1)

Core 1
Core References
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20486

Scores

EPSS 0.0144
EPSS Percentile 80.9%

Details

Status published
Products (1)
hinton_design/phpht_topsites_free 1.022b
Published Mar 02, 2007
Tracked Since Feb 18, 2026