← Vulnerability feed

Vulnerability record · CVE-2006-2744 · published 1 June 2006

CVE-2006-2744: Facile interactive web vulnerability

FFacile Interactive Web · Facile Interactive Web

PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter.

7.5 CVSS 2.0 High EPSS 9.9% · top 4.6%
7.5CVSS 2.0 base score
9.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References, 8 tagged exploit
16 Jun 2026Last modified by NVD

Description

PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/20358 ExploitVendor Advisory
http://securityreason.com/securityalert/1010
http://www.nukedx.com/?getxpl=35 Exploit
http://www.nukedx.com/?viewdoc=35 ExploitVendor Advisory
http://www.osvdb.org/26100
http://www.securityfocus.com/archive/1/435283/100/0/threaded
http://www.securityfocus.com/bid/18149 Exploit
http://www.vupen.com/english/advisories/2006/2036
https://exchange.xforce.ibmcloud.com/vulnerabilities/26839
http://secunia.com/advisories/20358 ExploitVendor Advisory
http://securityreason.com/securityalert/1010
http://www.nukedx.com/?getxpl=35 Exploit
http://www.nukedx.com/?viewdoc=35 ExploitVendor Advisory
http://www.osvdb.org/26100
http://www.securityfocus.com/archive/1/435283/100/0/threaded
http://www.securityfocus.com/bid/18149 Exploit
http://www.vupen.com/english/advisories/2006/2036
https://exchange.xforce.ibmcloud.com/vulnerabilities/26839

Track CVE-2006-2744 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.8CVE-2006-2746Facile interactive web vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script…EPSS 3.1%5.1CVE-2006-2745Facile interactive web vulnerabilityMultiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals is enabled, allow remote attack…EPSS 6.8%

Source: NIST National Vulnerability Database (record CVE-2006-2744), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.