AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-1477

HIGH · CVSS 7.5 EPSS 4.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-03-29 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2006-1477
Severity
HIGH
CVSS
7.5
EPSS
4.70%
Java

Original NVD Description

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to include and execute arbitrary PHP code via the abs_path parameter in (1) initiate.php, (2) waiting.php, (3) welcome.php, (4) admin/index.php, (5) javascript.php, (6) checkchat.php, and (7) blank.php.