CVE Feed

    Dashboard / CVE / CVE-2006-4236

    CVE-2006-4236

    Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) shopid parameter to (a) s01.php, (b) s02.php, (c) s03.php, and (d) s04.php; and possibly a URL located after "shopid=" or "sid=" in the PATH_INFO.

    Published:Aug 21, 2006
    Last Modified:Apr 16, 2026
    EPS:Aug 21, 2006
    EPSS Score:0.11055
    CVSS Score:7.5

    Affected Products

    Vendor
    Powergap
    Product
    Powergap Business
    Vendor
    Powergap
    Product
    Powergap Lite

    Exploits

    http://www.securityfocus.com/bid/19565http://www.securityfocus.com/bid/19565https://www.exploit-db.com/exploits/2201

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://securityreason.com/securityalert/1417
    http://securitytracker.com/id?1016715
    http://www.osvdb.org/29496
    http://www.osvdb.org/29497
    http://www.osvdb.org/29498
    http://www.osvdb.org/29499
    http://www.osvdb.org/29500
    http://www.securityfocus.com/archive/1/443469/100/0/threaded
    http://www.securityfocus.com/bid/19565
    https://exchange.xforce.ibmcloud.com/vulnerabilities/28425
    https://www.exploit-db.com/exploits/2201
    http://securityreason.com/securityalert/1417
    http://securitytracker.com/id?1016715
    http://www.osvdb.org/29496
    http://www.osvdb.org/29497
    http://www.osvdb.org/29498
    http://www.osvdb.org/29499
    http://www.osvdb.org/29500
    http://www.securityfocus.com/archive/1/443469/100/0/threaded
    http://www.securityfocus.com/bid/19565
    https://exchange.xforce.ibmcloud.com/vulnerabilities/28425
    https://www.exploit-db.com/exploits/2201

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High