CVE-2006-6575: Brian Drawert Yaplap

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in ldap.php in Brian Drawert Yet Another PHP LDAP Admin Project (yaplap) 0.6 and 0.6.1 allows remote attackers to execute arbitrary PHP code via a URL in the LOGIN_style parameter.

Affected products

• Brian Drawert Yaplap: version 0.6 only; version 0.6.1 only

Published 2006-12-15. Last modified 2026-06-16.