CVE-2006-4498: PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPH...

Security readout for executives and security teams

CVE-2006-4498 is a remote file inclusion issue in an old PortailPHP PhpAlbum module. If exposed, an attacker could make the site load attacker-controlled PHP code, potentially taking over the web application. The source bundle does not identify a vendor patch or current exploitation. Most exposure is likely limited to legacy PortailPHP deployments still running PhpAlbum mod_phpalbum 2.15, especially internet-facing PHP sites. Modern environments are unlikely affected unless they retain this old module or copied code. Treat confirmed internet-facing instances as urgent legacy-risk remediation. The business risk is web server compromise, but urgency depends on whether this obsolete module is actually deployed. Mitigation focus: Inventory PortailPHP sites for PhpAlbum mod_phpalbum 2.15 and sommaire_admin.php.; Check vendor or maintainer guidance; the bundle names no patch.; Remove or disable the module if it is not required..

Prepared

Jun 29, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.