CVE-2006-4207: Bob Jewell Discloser

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to (1) content/content.php or (2) /inc/indexhead.php.

Affected products

• Bob Jewell Discloser: up to and including 0.0.4

Published 2006-08-17. Last modified 2026-06-16.