CVE-2006-4426: PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-E...

Security readout for executives and security teams

AlberT-EasySite 1.0a5 and earlier has a remote file inclusion flaw in a logout PHP script. If the vulnerable site is internet-facing, an attacker could make the server run attacker-controlled PHP code. The sources do not provide CVSS, a vendor patch level, or evidence of active exploitation. Exposure is limited to AlberT-EasySite 1.0a5 and earlier where the affected logout.php path is deployed and reachable. Because source metadata lists affected vendor/product as n/a, confirm by file path, application version, and asset ownership rather than relying on CPE matching. Treat this as urgent only if AlberT-EasySite is present and exposed. The impact is severe because arbitrary PHP execution can compromise the web server, but likely scope is narrow due to the old, specific product and incomplete modern telemetry. Mitigation focus: Identify any AlberT-EasySite deployments and confirm whether they are 1.0a5 or earlier.; Check vendor or archived advisory guidance for a fixed version or supported migration path.; Remove public access to the affected path until remediation is confirmed..

Prepared

Jun 29, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.