CVE-2006-0164: Woah-Projekt Phgstats

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary files and execute arbitrary PHP code by modifying the PHGDIR variable.

Affected products

• Woah-Projekt Phgstats: version 0.1 only; version 0.2 only; version 0.3 only; version 0.3.1 only; version 0.4 only; version 0.4.1 only; …

Published 2006-01-11. Last modified 2026-06-16.