CVE-2006-4738: Jetbox CMS

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter. NOTE: The relative_script_path vector is already covered by CVE-2006-2270.

Affected products

• Jetbox Jetbox CMS: version 2.1_sr1 only

Published 2006-09-13. Last modified 2026-06-16.