CVE-2006-4984: Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to exec...

Security readout for executives and security teams

CVE-2006-4984 is a legacy remote file inclusion issue in Grayscale BandSite CMS. A remote attacker could make vulnerable PHP scripts load attacker-controlled PHP through the GLOBALS[root_path] parameter, leading to arbitrary code execution. The bundle does not identify a patch, current vendor status, or active exploitation. Exposure is likely limited to organizations still running Grayscale BandSite CMS with the named adminpanel PHP files reachable, especially on legacy internet-facing PHP hosting. The bundle provides no CPEs, affected versions, or product lifecycle details. Prioritize investigation if Grayscale BandSite CMS exists in the environment. This is old software, but the described impact is server-side code execution. If the product is absent, no action is needed beyond documenting the negative finding. Mitigation focus: Check vendor or advisory guidance for any surviving patch or supported upgrade path.; Remove or replace unsupported Grayscale BandSite CMS deployments.; Restrict public access to the affected adminpanel PHP files..

Prepared

Jun 29, 2026, 10:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.