Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-4189

17
FAUCET Score

CVE-2006-4189 describes multiple remote file inclusion vulnerabilities in Boonex Dolphin 5.1, allowing attackers to execute arbitrary PHP code by manipulating the 'dir[inc]' parameter in numerous scripts. The vulnerability has a CVSS score of 5.1, indicating a medium severity with network access, high attack complexity, and partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
5.1CPE matchmatch criteria
cpe:2.3:a:boonex:dolphin:5.1:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.1MEDIUM

AV:N/AC:H/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Exploitability Score
4.9
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
6.23%
Probability of exploitation in next 30 days
EPSS Percentile
92.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0623 is in the 92nd percentile among its peer group of 19,958 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

secunia.com / advisories/21535
Vendor Advisory
securitytracker.com / id
Exploit
exchange.xforce.ibmcloud.com / vulnerabilities/28363
osvdb.org / 28473
Exploit
osvdb.org / 28474
Exploit
osvdb.org / 28478
Exploit
osvdb.org / 28479
Exploit
osvdb.org / 28485
Exploit
osvdb.org / 28492
Exploit
osvdb.org / 28493
Exploit
osvdb.org / 28496
Exploit
osvdb.org / 28498
Exploit
osvdb.org / 28499
Exploit
osvdb.org / 28500
Exploit
osvdb.org / 28501
Exploit
osvdb.org / 28502
Exploit
osvdb.org / 28503
Exploit
osvdb.org / 28504
Exploit
osvdb.org / 28505
Exploit
osvdb.org / 28506
Exploit
osvdb.org / 28507
Exploit
osvdb.org / 28508
Exploit
osvdb.org / 28509
Exploit
osvdb.org / 28510
Exploit
osvdb.org / 28511
Exploit
osvdb.org / 28512
Exploit
osvdb.org / 28513
Exploit
osvdb.org / 28514
Exploit
osvdb.org / 28515
Exploit
osvdb.org / 28516
Exploit
osvdb.org / 28517
Exploit
osvdb.org / 28519
Exploit
osvdb.org / 28520
Exploit
osvdb.org / 28521
Exploit
osvdb.org / 28522
Exploit
osvdb.org / 28523
Exploit
osvdb.org / 28524
Exploit
osvdb.org / 28525
Exploit
osvdb.org / 28526
Exploit
osvdb.org / 28527
Exploit
osvdb.org / 28528
Exploit
osvdb.org / 28529
Exploit
osvdb.org / 28530
Exploit
securityfocus.com / bid/21182
vupen.com / english/advisories/2006/3346