$ cve CVE-2006-3019 JSON

CVE-2006-3019 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 7.9% (pctl 95)

Patch early

A public exploit exists.

Description

Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPCMS_INCLUDEPATH parameter to files in parser/include/ including (1) class.parser_phpcms.php, (2) class.session_phpcms.php, (3) class.edit_phpcms.php, (4) class.http_indexer_phpcms.php, (5) class.cache_phpcms.php, (6) class.search_phpcms.php, (7) class.lib_indexer_universal_phpcms.php, and (8) class.layout_phpcms.php, (9) parser/plugs/counter.php, and (10) parser/parser.php. NOTE: the class.cache_phpcms.php vector was also reported to affect 1.1.7.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	7.88% — more likely to be exploited than 95% of all CVEs
Weakness	CWE-94
On CISA KEV	no
Public exploit	yes
Published	2006-06-15
Last modified	2026-06-16

Affected (1)

Vendor	Product
phpcms	phpcms

Public exploits

Source	Title	Date
exploit-db	phpCMS 1.1.7 - 'counter.php' Remote File Inclusion	2006-12-26
exploit-db	phpCMS 1.1.7 - 'parser.php' Remote File Inclusion	2006-12-26
exploit-db	phpCMS 1.1.7 - 'class.parser_PHPcms.php' Remote File Inclusion	2006-12-26
exploit-db	phpCMS 1.1.7 - 'class.session_PHPcms.php' Remote File Inclusion	2006-12-26
exploit-db	phpCMS 1.1.7 - 'class.edit_PHPcms.php' Remote File Inclusion	2006-12-26
exploit-db	phpCMS 1.1.7 - 'class.http_indexer_PHPcms.php' Remote File Inclusion	2006-12-26
exploit-db	phpCMS 1.1.7 - 'class.cache_PHPcms.php' Remote File Inclusion	2006-12-26
exploit-db	phpCMS 1.1.7 - 'class.search_PHPcms.php' Remote File Inclusion	2006-12-26
exploit-db	phpCMS 1.1.7 - 'class.lib_indexer_universal_PHPcms.php' Remote File Inclusion	2006-12-26
exploit-db	phpCMS 1.1.7 - 'class.layout_PHPcms.php' Remote File Inclusion	2006-12-26

References

→ the Explorer · watch your stack · NVD