CVE-2006-2241: PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote...

Security readout for executives and security teams

Fast Click SQL Lite versions 1.1.3 and earlier reportedly let an attacker supply an external URL to show.php, causing the server to run attacker-controlled PHP. This is an old, narrow product issue, but any internet-facing legacy installation could become a full server compromise path. Exposure is likely limited to legacy Fast Click SQL Lite deployments at version 1.1.3 or earlier, especially public PHP sites retaining show.php. Modern environments are exposed only if this obsolete application or copied vulnerable code remains deployed. Prioritize if any legacy Fast Click SQL Lite instance is internet-facing. The business risk is potential server takeover, but urgency depends on whether the obsolete product is actually present. Mitigation focus: Identify and remove Fast Click SQL Lite 1.1.3 or earlier from public servers.; If business-critical, restrict access to trusted networks until vendor guidance is confirmed.; Check vendor or archived advisory guidance; no patch is named in the source bundle..

Prepared

Jun 29, 2026, 12:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.