CVE-2006-4782
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote...
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php.
Exploit likelihood
What each source reports
NVD Score used
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php.
- Record
CVE-2006-4782- CVSS 2.0
- 5.4 Medium
AV:N/AC:H/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
CVE List No score
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php.
- Record
CVE-2006-4782- Updated
- 2026-11-02
EUVDEUVD-2006-4769 No score
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php.
- Record
EUVD-2006-4769- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ph8m-vpmc-9w87 No score
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote...
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php.
- Record
GHSA-ph8m-vpmc-9w87- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | webSPELL 4.01.01 - Database Backup Download | 2006-09-12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4782 is a medium vulnerability (CVSS 5.4) in Webspell, published September 14, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.24%, the 88th percentile. No source names a fixed version.