CVE-2006-4635

MEDIUM 6.5CVE-2006-4635 · Published 08/09/2006 · updated 16/06/2026

In short

CVE-2006-4635 is a MEDIUM (CVSS 6.5) vulnerability affecting mysource classic (squiz).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 71.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mysource classic squiz	`≤ 2.14.6`	No fix yet

Description

Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in Web_Extensions - Notitia (I/II). NOTE: due to lack of details, it is not clear whether this issue is file inclusion, static code injection, or another type of issue.

References

More vulnerabilities in mysource classic

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free