CVE-2006-4779

PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded...

7.5 HighPublic exploit

CVE-2006-4779 is a high vulnerability (CVSS 7.5) in Phpbb Group Vitrax Premodded Phpbb, published September 14, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.00%, the 87th percentile. No source names a fixed version.

PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Exploit likelihood

3.00%Down 1.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2006-4779
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-4779
Updated: 2026-11-02

EUVDEUVD-2006-4766 No score

Record: EUVD-2006-4766
Updated: 2026-11-03

GitHub AdvisoriesGHSA-whm6-6g22-m6ph No score

PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded...

Record: GHSA-whm6-6g22-m6ph
Updated: 2026-11-02

Affected products

phpbb group vitrax premodded phpbb

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Vitrax Pre-modded 1.0.6-r3 - Remote File Inclusion	2006-09-12

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD