CVE-2006-4311

HIGH 7.5CVE-2006-4311 · Published 23/08/2006 · updated 16/06/2026

In short

CVE-2006-4311 is a HIGH (CVSS 7.5) vulnerability affecting enterprise adressbook (sonium).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
enterprise adressbook sonium	`= 0.2`	No fix yet

Description

PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1_Adressbuch/delete.php.

References

secunia.com/advisories/21553 · Vendor Advisory
bb-pcsecurity.de/Websecurity/342/org/Sonium_Enterprise_Adressbook_Version_0.2_%28folder%29_RFI.htm
securityfocus.com/archive/1/443701/100/0/threaded
securityfocus.com/bid/19597
vupen.com/english/advisories/2006/3334
exchange.xforce.ibmcloud.com/vulnerabilities/28464

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free