CVE-2006-4877: David Bennett PHP-Post

Medium severity, CVSS 5.0. EPSS: 8.6% chance of exploitation in the next 30 days.

Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite arbitrary program variables via multiple vectors that use the extract function, as demonstrated by the table_prefix parameter in (1) index.php, (2) profile.php, and (3) header.php.

Affected products

• David Bennett PHP-Post: up to and including 1.0

Published 2006-09-19. Last modified 2026-06-16.