CVE-2006-4004

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-08-07 · updated 2026-06-16

Description

Directory traversal vulnerability in index.php in vbPortal 3.0.2 through 3.6.0 Beta 1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bbvbplang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.

Affected products

Vbportal: 3.0.2, 3.5.0_beta_2, 3.5.0_beta_3, 3.5.0_gold, 3.6.0_beta_1

References

http://secunia.com/advisories/21287
http://www.phpportals.com/forums/showthread.php?t=17308
http://www.securityfocus.com/bid/19257
http://www.vupen.com/english/advisories/2006/3102
https://exchange.xforce.ibmcloud.com/vulnerabilities/28077
https://www.exploit-db.com/exploits/2087
http://secunia.com/advisories/21287
http://www.phpportals.com/forums/showthread.php?t=17308
http://www.securityfocus.com/bid/19257
http://www.vupen.com/english/advisories/2006/3102
https://exchange.xforce.ibmcloud.com/vulnerabilities/28077
https://www.exploit-db.com/exploits/2087

Get alerted when CVE-2006-4004 or the next vulnerability affects your stack