CVE-2006-5015: Kietu

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in hit.php in Kietu 3.2 allows remote attackers to execute arbitrary PHP code via an FTP URL in the url_hit parameter.

Affected products

• Kietu Kietu: version 3.2 only

Published 2006-09-27. Last modified 2026-06-16.