[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$facibO4dPILcMv9qMXVnhp26Smp7O59a-mfY0tIkxs2k":3,"g5a-risk:CVE-2006-4422":154},{"success":4,"data":5,"meta":152},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":111,"weaknesses":112,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":116,"seoMetadata":117,"configurations":142,"relatedVendorCves":150,"notableEvents":151},"CVE-2006-4422","What is CVE-2006-4422?","PHP remote file inclusion vulnerability in includes\u002Fphpdig\u002Flibs\u002Fsearch_function.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the relative_script_path parameter, a different vector than CVE-2006-2270. NOTE: this issue has been disputed, and as of 20060830, CVE analysis concurs with the dispute.  In addition, it is likely that the vulnerability is actually in a third party module, phpDig 1.8.8","PHP remote file inclusion vulnerability in includes\u002Fphpdig\u002Flibs\u002Fsearch_function.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary PHP code v...","2006-08-29T00:04:00","2026-06-16T22:29:04.067",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":4,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.07323,[34,34,34,34,34,34,34],"High",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"jetbox","jetbox_cms","2.1","cpe:2.3:a:jetbox:jetbox_cms:2.1:*:*:*:*:*:*:*",1,[45,49,53,56,60,64,67,70,73,76,79,83,87,89,91,93,95,97,99,101,103,105,107,109],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fsecuritytracker.com\u002Fid?1016765","Securitytracker",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.attrition.org\u002Fpipermail\u002Fvim\u002F2006-August\u002F000997.html","Attrition",[],{"url":54,"source":51,"tags":55},"http:\u002F\u002Fwww.attrition.org\u002Fpipermail\u002Fvim\u002F2006-August\u002F001003.html",[],{"url":57,"source":58,"tags":59},"http:\u002F\u002Fwww.osvdb.org\u002F28299","Osvdb",[],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F444422\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":65,"source":62,"tags":66},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F444527\u002F100\u002F0\u002Fthreaded",[],{"url":68,"source":62,"tags":69},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F444640\u002F100\u002F0\u002Fthreaded",[],{"url":71,"source":62,"tags":72},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F444740\u002F100\u002F0\u002Fthreaded",[],{"url":74,"source":62,"tags":75},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F444822\u002F100\u002F0\u002Fthreaded",[],{"url":77,"source":62,"tags":78},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F444826\u002F100\u002F0\u002Fthreaded",[],{"url":80,"source":62,"tags":81},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F19722",[82],"Exploit",{"url":84,"source":85,"tags":86},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F28588","Ibmcloud",[],{"url":46,"source":47,"tags":88},[],{"url":50,"source":51,"tags":90},[],{"url":54,"source":51,"tags":92},[],{"url":57,"source":58,"tags":94},[],{"url":61,"source":62,"tags":96},[],{"url":65,"source":62,"tags":98},[],{"url":68,"source":62,"tags":100},[],{"url":71,"source":62,"tags":102},[],{"url":74,"source":62,"tags":104},[],{"url":77,"source":62,"tags":106},[],{"url":80,"source":62,"tags":108},[82],{"url":84,"source":85,"tags":110},[],24,[113],{"id":114,"name":114,"description":115},"Unknown","NVD-CWE-Other",[],{"title":118,"metaDescription":119,"keywords":120,"canonicalUrl":121,"structuredData":122},"What is CVE-2006-4422? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2006-4422, a high severity cyber security vulnerability from 2006. PHP remote file inclusion vulnerability in includes\u002Fphpdig\u002Fl...","CVE-2006-4422, CVE-2006-4422 vulnerability, CVE-2006-4422 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2006, CVSS score, exploit, patch, remediation, jetbox security, jetbox_cms vulnerability","\u002Fwhat-is\u002Fcve-2006-4422",{"@context":123,"@type":124,"headline":118,"description":119,"datePublished":10,"dateModified":11,"author":125,"publisher":129,"about":133,"mainEntityOfPage":137,"articleSection":140,"keywords":141},"https:\u002F\u002Fschema.org","TechArticle",{"@type":126,"name":127,"url":128},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":126,"name":127,"url":128,"logo":130},{"@type":131,"url":132},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":134,"name":6,"description":135,"additionalType":136},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":138,"@id":139},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2006-4422","Cybersecurity","CVE-2006-4422, CVE-2006-4422 vulnerability, CVE-2006-4422 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[143],{"Operator":28,"Negate":28,"Nodes":144},[145],{"Operator":146,"Negate":32,"CPEMatch":147},"OR",[148],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":149,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0916DF3D-71ED-423F-A2F4-842EE706ADDC",[],[],{"lastModified":11,"cacheTime":153,"version":22},1792264663627,{"score":155,"band":156,"action":157,"scoredAt":158},49,"Medium","Plan remediation","2026-10-17T06:34:24.746844+00:00"]