CVE-2006-4113: Hitweb

Medium severity, CVSS 5.1. EPSS: 3.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in genpage-cgi.php in Brian Fraval hitweb 4.2 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the REP_INC parameter.

Affected products

• Hitweb Hitweb: up to and including 4.2

Published 2006-08-14. Last modified 2026-06-16.