CVE-2006-6765: Pagetool

Medium severity, CVSS 6.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow remote attackers to execute arbitrary PHP code via (1) a local filename or FTP/share URI in the config_file parameter or (2) a URL in the ptconf[src] parameter.

Affected products

• Pagetool Pagetool: up to and including 1.07

Published 2006-12-27. Last modified 2026-06-16.