CVE-2006-4969 in the critical feed json
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via…
published 2006-09-25 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-4955
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 12.3%
- EPSS 12.3% chance of exploitation in 30 days, percentile 96%
- public exploits
- 1
- Exploit-DB
Summary
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the Inc_Dir parameter in (1) affiliates.php, (2) orders.php, (3) events.php, (4) index.php, (5) articles.php, (6) faqs.php, (7) guestbook.php, (8) catalog.php, (9) wholesale.php, (10) weblinks.php, (11) certificates.php, (12) sitesearch.php, (13) contact.php, (14) sitemap.php, (15) search.php, (16) registry.php, or (17) error.php.
Timeline
- First public exploit (EDB-2393)
- Published
Exploit prediction
12.31% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-2393 Pie Cart Pro - 'Inc_Dir' Remote File Inclusion webapps, 2006-09-19
- securityfocus.com http://www.securityfocus.com/bid/20099 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
exploit-db.com
/exploits/2393
exploit
-
securityfocus.com
/bid/20099
vdb-entry, exploit
-
osvdb.org
/29198
vdb-entry
-
osvdb.org
/29211
vdb-entry
-
osvdb.org
/29210
vdb-entry
-
osvdb.org
/29206
vdb-entry
-
osvdb.org
/29199
vdb-entry
-
osvdb.org
/29200
vdb-entry
-
osvdb.org
/29208
vdb-entry
-
osvdb.org
/29202
vdb-entry
-
osvdb.org
/29201
vdb-entry
-
osvdb.org
/29203
vdb-entry
-
vupen.com
/english/advisories/2006/3798
vdb-entry
-
osvdb.org
/29212
vdb-entry
-
osvdb.org
/29214
vdb-entry
-
osvdb.org
/29209
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/29023
vdb-entry
-
osvdb.org
/29205
vdb-entry
-
osvdb.org
/29204
vdb-entry
-
osvdb.org
/29207
vdb-entry
-
osvdb.org
/29213
vdb-entry
-
secunia.com
/advisories/22131
third-party-advisory
Sources
- CVE List CVE-2006-4969
- NVD CVE-2006-4969
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.