CVE-2006-4828

Published: Sep 15, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter.

Affected (7)

Products: Photopost: Photopost Php Pro

Photopost

1 product

Photopost Php Pro

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Photopost Photopost Php Pro	Version 4.0
Photopost Photopost Php Pro	Version 4.1
Photopost Photopost Php Pro	Version 4.2
Photopost Photopost Php Pro	Version 4.3
Photopost Photopost Php Pro	Version 4.4
Photopost Photopost Php Pro	Version 4.5
Photopost Photopost Php Pro	Version 4.6