CVE-2006-4618

Name	CVE-2006-4618
Description	PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-link 2.3.4, allows remote attackers to execute arbitrary PHP code via a URL in the ADODB_DIR parameter.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libphp-adodb (PTS)	jessie, jessie (lts)	5.15-1+deb8u2	fixed
	stretch (security), stretch (lts), stretch	5.20.9-1+deb9u1	fixed
	buster (security), buster, buster (lts)	5.20.14-1+deb10u1	fixed
	bullseye (security), bullseye	5.20.19-1+deb11u1	fixed
	bookworm	5.21.4-1	fixed
	sid, trixie	5.22.7-0.1	fixed
phppgadmin (PTS)	jessie, jessie (lts)	5.1-1.1+deb8u1	fixed
	stretch	5.1+ds-2	fixed
	buster (security), buster, buster (lts)	5.1+ds-4+deb10u1	fixed
	sid, trixie	7.14.7+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version
egroupware	source	(unstable)	(not affected)
gallery2	source	(unstable)	(not affected)
libphp-adodb	source	(unstable)	(not affected)
moodle	source	(unstable)	(not affected)
phppgadmin	source	(unstable)	(not affected)
phpwiki	source	(unstable)	(not affected)

Notes

- libphp-adodb <not-affected> (vulnerable code seems to be In-link specific)
- egroupware <not-affected> (vulnerable code seems to be In-link specific)
- moodle <not-affected> (vulnerable code seems to be In-link specific)
- phppgadmin <not-affected> (vulnerable code seems to be In-link specific)
- gallery2 <not-affected> (vulnerable code seems to be In-link specific)
- phpwiki <not-affected> (vulnerable code seems to be In-link specific)