CVE-2006-4877

MEDIUM · CVSS 5 EPSS 8.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-09-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-4877

Severity

MEDIUM

CVSS

EPSS

8.56%

Original NVD Description

Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite arbitrary program variables via multiple vectors that use the extract function, as demonstrated by the table_prefix parameter in (1) index.php, (2) profile.php, and (3) header.php.