{"api_version":"1","generated_at":"2026-07-23T05:22:19+00:00","cve":"CVE-2006-4191","urls":{"html":"https://cve.report/CVE-2006-4191","api":"https://cve.report/api/cve/CVE-2006-4191.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4191","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4191"},"summary":{"title":"CVE-2006-4191","description":"Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-08-17 01:04:00","updated_at":"2021-04-29 15:15:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28356","name":"xmb-memcp-file-include(28356)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/19494","name":"19494","refsource":"BID","tags":[],"title":"XMB Langfilenew Local File Include Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://retrogod.altervista.org/xmb_196_sql.html","name":"http://retrogod.altervista.org/xmb_196_sql.html","refsource":"MISC","tags":["Exploit"],"title":"Error 404 :(","mime":"text/plain","httpstatus":"404","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/19501","name":"19501","refsource":"BID","tags":["Exploit"],"title":"Extreme Media Board MemCP.PHP Local File Include Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/443167/100/0/threaded","name":"20060813 XMB <= 1.9.6 Final basename()/'langfilenew' arbitrary local inclusion / remote commands execution","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/2178","name":"2178","refsource":"EXPLOIT-DB","tags":[],"title":"XMB 1.9.6 Final - 'basename()' Remote Command Execution - PHP webapps Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1411","name":"1411","refsource":"SREASON","tags":[],"title":"SecurityReason - XMB <= 1.9.6 Final basename()/'langfilenew' arbitrary local inclusion / remote commands execution","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21293","name":"21293","refsource":"SECUNIA","tags":["Exploit","Vendor Advisory"],"title":"XMB \"u2uid\" SQL Injection and Local File Inclusion - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","name":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","refsource":"MISC","tags":[],"title":"Security Issue History - XMBdocs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4191","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4191","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4191","vulnerable":"1","versionEndIncluding":"1.9.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"xmb_software","cpe5":"extreme_message_board","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2006-4191","organization":"XMB","lastmodified":"2021-04-23","contributor":"Robert Chapin","statementText":"XMB versions 1.9.8 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/","cve_year":"2006","cve_id":"4191","crc32":"08dfc33e"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-4191","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"21293","refsource":"SECUNIA","url":"http://secunia.com/advisories/21293"},{"name":"1411","refsource":"SREASON","url":"http://securityreason.com/securityalert/1411"},{"name":"2178","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/2178"},{"name":"19501","refsource":"BID","url":"http://www.securityfocus.com/bid/19501"},{"name":"20060813 XMB <= 1.9.6 Final basename()/'langfilenew' arbitrary local inclusion / remote commands execution","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/443167/100/0/threaded"},{"name":"http://retrogod.altervista.org/xmb_196_sql.html","refsource":"MISC","url":"http://retrogod.altervista.org/xmb_196_sql.html"},{"name":"xmb-memcp-file-include(28356)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28356"},{"name":"19494","refsource":"BID","url":"http://www.securityfocus.com/bid/19494"},{"refsource":"MISC","name":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History"}]}},"nvd":{"publishedDate":"2006-08-17 01:04:00","lastModifiedDate":"2021-04-29 15:15:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"severity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:xmb_software:extreme_message_board:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9.6","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4191","Ordinal":"19517","Title":"CVE-2006-4191","CVE":"CVE-2006-4191","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4191","Ordinal":"1","NoteData":"Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"4191","Ordinal":"2","NoteData":"2006-08-16","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4191","Ordinal":"3","NoteData":"2021-04-29","Type":"Other","Title":"Modified"}]}}}