CVE-2006-2826: Phplib Team Phplib

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute arbitrary SQL commands via the id variable, which is set by a client through a query string or a cookie.

Affected products

• Phplib Team Phplib: version 7.4 only; version 7.4_pre2 only

Published 2006-06-05. Last modified 2026-06-16.