Vulnerability record · CVE-2006-4059 · published 10 August 2006

CVE-2006-4059: Usolved newsolved lite vulnerability

Usolved · Newsolved Lite

Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) newsscript_lyt.php, (2) newsticker/newsscript_get.php, (3) inc/output/news_theme1.php, (4) inc/output/news_theme2.php, or (5) inc/output/news_theme3.php.

7.5 CVSS 2.0 High EPSS 16% · top 3.3%

7.5CVSS 2.0 base score

16%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

28References, 2 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Newsolved Lite Usolved

References

Link	Tags
http://secunia.com/advisories/21395	Vendor Advisory
http://securityreason.com/securityalert/1366
http://www.bb-pcsecurity.de/sicherheit_286.htm	ExploitPatchVendor Advisory
http://www.osvdb.org/27836
http://www.osvdb.org/27837
http://www.osvdb.org/27838
http://www.osvdb.org/27839
http://www.osvdb.org/27840
http://www.securityfocus.com/archive/1/442434/100/0/threaded
http://www.securityfocus.com/bid/19379	Patch
http://www.usolved.net/site/index.php	Patch
http://www.vupen.com/english/advisories/2006/3200
https://exchange.xforce.ibmcloud.com/vulnerabilities/28262
https://www.exploit-db.com/exploits/2135
http://secunia.com/advisories/21395	Vendor Advisory
http://securityreason.com/securityalert/1366
http://www.bb-pcsecurity.de/sicherheit_286.htm	ExploitPatchVendor Advisory
http://www.osvdb.org/27836
http://www.osvdb.org/27837
http://www.osvdb.org/27838
http://www.osvdb.org/27839
http://www.osvdb.org/27840
http://www.securityfocus.com/archive/1/442434/100/0/threaded
http://www.securityfocus.com/bid/19379	Patch
http://www.usolved.net/site/index.php	Patch
http://www.vupen.com/english/advisories/2006/3200
https://exchange.xforce.ibmcloud.com/vulnerabilities/28262
https://www.exploit-db.com/exploits/2135

Track CVE-2006-4059 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2006-4059), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.