Field Assessment
AI analysis pending.
CVE
CVE-2006-4530
Severity
HIGH
CVSS
7.5
EPSS
1.68%
Original Filing — NVD Description
Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php.