CVE-2006-3984: Gianluca Baldo Phpauction

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter.

Affected products

• Gianluca Baldo Phpauction: version 2.1 only
• Phpadsnew Phpadsnew: version 2.0.5 only

Published 2006-08-05. Last modified 2026-06-16.