| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | CVE-2006-4063 | 10 Aug 200600:00 | – | cvelist |
 | SAPID 1.2.3.05 - 'ROOT_PATH' Remote File Inclusion | 7 Aug 200600:00 | – | exploitdb |
| SAPID Blog Beta 2 - 'ROOT_PATH' Remote File Inclusion | 7 Aug 200600:00 | – | exploitdb |
| SAPID Gallery 1.0 - 'ROOT_PATH' Remote File Inclusion | 7 Aug 200600:00 | – | exploitdb |
| SAPID Shop 1.2 - 'ROOT_PATH' Remote File Inclusion | 7 Aug 200600:00 | – | exploitdb |
 | EUVD-2006-4056 | 7 Oct 202500:30 | – | euvd |
 | CVE-2006-4063 | 10 Aug 200600:04 | – | nvd |
 | CVE-2006-4063: Undefined Security Weakness | 10 Aug 200600:00 | – | rapid7 |
Node
| Source | Link |
|---|---|
| vupen | www.vupen.com/english/advisories/2006/3196 |
| exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/28251 |
| exploit-db | www.exploit-db.com/exploits/2129 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| root_path | query param | www.site.com/[sapidcms_path]/usr/extensions/get_infochannel.inc.php?root_path=[evil_scripts] | Remote File Inclusion via root_path in SAPID CMS get_infochannel.inc.php. | |
| GLOBALS[root_path] | query param | www.site.com/[sapidcms_path]/usr/extensions/get_tree.inc.php?GLOBALS[root_path]=[evil_scripts] | Remote File Inclusion via GLOBALS[root_path] in SAPID CMS get_tree.inc.php. | |
| root_path | query param | www.site.com/[sapidblog_path]/usr/extensions/get_blog_infochannel.inc.php?root_path=[evil_scripts] | Remote File Inclusion via root_path in SAPID Blog get_blog_infochannel.inc.php. | |
| root_path | query param | www.site.com/[sapidblog_path]/usr/extensions/get_blog_meta_info.inc.php?root_path=[evil_scripts] | Remote File Inclusion via root_path in SAPID Blog get_blog_meta_info.inc.php. | |
| root_path | query param | www.site.com/[sapidblog_path]/usr/extensions/get_infochannel.inc.php?root_path=[evil_scripts] | Remote File Inclusion via root_path in SAPID Blog get_infochannel.inc.php. | |
| GLOBALS[root_path] | query param | www.site.com/[sapidblog_path]/usr/extensions/get_tree.inc.php?GLOBALS[root_path]=[evil_scripts] | Remote File Inclusion via GLOBALS[root_path] in SAPID Blog get_tree.inc.php. | |
| root_path | query param | www.site.com/[sapidgalery_path]/usr/extensions/get_calendar.inc.php?root_path=[evil_scripts] | Remote File Inclusion via root_path in SAPID Gallery get_calendar.inc.php. | |
| GLOBALS[root_path] | query param | www.site.com/[sapidgalery_path]/usr/extensions/get_tree.inc.php?GLOBALS[root_path]=[evil_scripts] | Remote File Inclusion via GLOBALS[root_path] in SAPID Gallery get_tree.inc.php. | |
| GLOBALS[root_path] | query param | www.site.com/[sapidshop_path]/usr/extensions/get_tree.inc.php?GLOBALS[root_path]=[evil_scripts] | Remote File Inclusion via GLOBALS[root_path] in SAPID Shop get_tree.inc.php. |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 22:28Current
8High risk
Vulners AI Score8
CVSS 27.5
EPSS0.03228