Skip to content
Fencer Vulns
medium 5.1

CVE-2006-4189 json

Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir…

published 2006-08-17 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-4179

cvss
5.1
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
6.3%
EPSS 6.3% chance of exploitation in 30 days, percentile 93%
public exploits
0
none known

Summary

Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (5) click.php, (6) faq.php, (7) gallery.php, (8) im.php, (9) inbox.php, (10) join_form.php, (11) logout.php, (12) messages_inbox.php, and many other scripts.

Exploit prediction

6.34% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • securitytracker.com http://securitytracker.com/id?1016692 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28501 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28492 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28527 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28525 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28517 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28499 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28526 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28502 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28515 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28511 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28521 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28479 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28516 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28508 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28507 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28504 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28510 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28514 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28522 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28505 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28529 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28500 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28478 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28509 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28485 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28512 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28528 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28513 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28498 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28493 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28523 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28503 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28496 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28473 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28506 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28474 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28519 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28520 referenced PoC, tagged "exploit" by a source, unverified
  • osvdb.org http://www.osvdb.org/28524 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.