CVE-2006-7183: PHP remote file inclusion vulnerability in styles.php in Exhibit Engine (EE) 1.22 and earlier allows remote...

Security readout for executives and security teams

This is a legacy PHP issue in Exhibit Engine 1.22 and earlier. If an affected site exposes the vulnerable styles.php file, an attacker may be able to make the server run attacker-supplied PHP code. That can become full compromise of the web application and possibly the hosting account. Exposure is most likely on old public websites still running Exhibit Engine 1.22 or earlier, especially where styles.php is reachable from the internet. The provided affected-product metadata is incomplete, so asset confirmation must come from local inventory, file review, or application ownership records. Prioritize any internet-facing instance for removal or containment. Although this is an old CVE with no KEV listing in the bundle, the impact is code execution and public exploit material exists, making unmanaged legacy exposure a high business risk. Mitigation focus: Identify and retire Exhibit Engine 1.22 or earlier installations.; Check vendor or archived project guidance for any fixed release.; Remove internet access to affected styles.php where possible..

Prepared

Jun 29, 2026, 06:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.