CVE-2006-7237: PHP remote file inclusion vulnerability in mod/nc_phpmyadmin/core/libraries/Theme_Manager.class.php in Ixpr...

Security readout for executives and security teams

CVE-2006-7237 describes a reported remote file inclusion issue in Ixprim 2.0. If reachable and vulnerable, an attacker could potentially make the server run attacker-controlled PHP code. The record itself warns that the provenance is unknown and details come only from third-party information. Exposure appears limited to legacy Ixprim 2.0 deployments that include the nc_phpmyadmin module, especially if the affected PHP path is internet-accessible. The bundle provides no reliable CPEs or broader affected-version range. Prioritize discovery over emergency response. The impact could be severe if present, but the evidence is old, incomplete, and not tied to known active exploitation. Legacy internet-facing systems deserve prompt review. Mitigation focus: Inventory for Ixprim 2.0 and the nc_phpmyadmin module.; Remove or retire unsupported Ixprim instances where possible.; Check vendor or archived project guidance for confirmed fixes..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.