CVE-2006-5625
published 2006-10-31CVE-2006-5625: PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System (WCMS) 4.1 and earlier allows…
PriorityP336medium5.1CVSS 2.0
AVNACHAuNCPIPAP
EXPLOIT
EPSS
2.23%
80.5th percentile
PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System (WCMS) 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the c[path] parameter.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nx | n_x_wcms | <= 4.1 | — |
| nx | n_x_wcms | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
nx N X Wcms up to 4.1 c[path] file inclusion (EDB-2659 / BID-20773)
vuldb·2026-04-26·CVSS 5.1
CVE-2006-5625 [MEDIUM] nx N X Wcms up to 4.1 c[path] file inclusion (EDB-2659 / BID-20773)
A vulnerability was found in nx N X Wcms up to 4.1. It has been declared as critical. This affects an unknown part. Executing a manipulation of the argument c[path] can lead to file inclusion.
This vulnerability is handled as CVE-2006-5625. The attack can be executed remotely. Additionally, an exploit exists.
GHSA
GHSA-4x6v-hm4c-f935: PHP remote file inclusion vulnerability in wwwdev/nxheader
ghsa_unreviewed·2022-05-01
CVE-2006-5625 [MEDIUM] GHSA-4x6v-hm4c-f935: PHP remote file inclusion vulnerability in wwwdev/nxheader
PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System (WCMS) 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the c[path] parameter.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/22627http://www.securityfocus.com/bid/20773http://www.vupen.com/english/advisories/2006/4227https://www.exploit-db.com/exploits/2659http://secunia.com/advisories/22627http://www.securityfocus.com/bid/20773http://www.vupen.com/english/advisories/2006/4227https://www.exploit-db.com/exploits/2659
2006-10-31
Published