← Database

CVE-2006-4077

HIGH CVSS: 7.5 Published: 2006-08-11 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the Language parameter.

Affected Platforms

Comet Comet Webfile Manager

Weakness Type

NVD-CWE-Other

References