CVE-2006-4827: Vmist Downstat

Medium severity, CVSS 5.1. EPSS: 6.6% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the art parameter to (1) admin.php, (2) chart.php, (3) modes.php, or (4) stats.php.

Affected products

• Vmist Downstat: up to and including 1.8; version 1.2 only; version 1.3 only; version 1.4 only; version 1.5 only; version 1.6 only; …

Published 2006-09-15. Last modified 2026-06-16.