CVE-2006-4583: Darrens 5-Dollar Script Archive Flashchat

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/cmses/aedatingCMS.php, (2) inc/cmses/aedatingCMS2.php, or (3) inc/cmses/aedating4CMS.php.

Affected products

• Darrens 5-Dollar Script Archive Flashchat: up to and including 4.6.1_beta

Published 2006-09-06. Last modified 2026-06-16.