CVE-2006-4636

HIGH 7.5CVE-2006-4636 · Published 08/09/2006 · updated 16/06/2026

In short

CVE-2006-4636 is a HIGH (CVSS 7.5) vulnerability affecting phpcommander (szewo).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 85.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpcommander szewo	`≤ 3.0`	No fix yet

Description

Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Directory parameter, as demonstrated by parameter values naming Apache HTTP Server log files that apparently contain PHP code.

References

secunia.com/advisories/21753 · Vendor Advisory
securityfocus.com/bid/19867 · Exploit
vupen.com/english/advisories/2006/3472
exploit-db.com/exploits/2310

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free