CVE-2006-5625: PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Con...

Security readout for executives and security teams

CVE-2006-5625 is a remote file inclusion issue in N/X 2002 Professional Edition WCMS. A remote attacker could cause the application to load attacker-controlled PHP through a parameter, leading to arbitrary PHP code execution. The source bundle does not provide CVSS, vendor status, or active exploitation evidence. Exposure is likely limited to legacy N/X 2002 Professional Edition WCMS 4.1 or earlier installations, especially internet-facing PHP deployments. Organizations may have exposure through forgotten legacy sites, archives, or hosted customer portals. Treat this as a high-priority legacy exposure issue. It enables remote code execution if the affected CMS is reachable, but urgency depends on whether any instance still exists in your environment. Mitigation focus: Identify and retire affected N/X 2002 WCMS 4.1 or earlier installations.; Check vendor or archived advisory guidance for a supported fix or upgrade path.; Remove public access to affected instances until remediation is confirmed..

Prepared

Jun 29, 2026, 09:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.