CVE-2006-0887

HIGH 7.5CVE-2006-0887 · Published 25/02/2006 · updated 16/06/2026

In short

CVE-2006-0887 is a HIGH (CVSS 7.5) vulnerability affecting phplib (phplib team).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phplib phplib_team	`= 7.4`	No fix yet

Description

Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a, when index.php3 from the PHPLib distribution is available on the server, allows remote attackers to execute arbitrary PHP code by including a base64-encoded representation of the code in a cookie. NOTE: this description was significantly updated on 20060605 to reflect new details after an initial vague advisory.

References

secunia.com/advisories/16902 · Patch
securitytracker.com/id
sourceforge.net/project/shownotes.php · Patch
gulftech.org
osvdb.org/23466
securityfocus.com/bid/16801
vupen.com/english/advisories/2006/0720 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/24873

More vulnerabilities in phplib

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free