{
    "id": "CVE-2006-3172",
    "published": "2006-06-23 00:02:00",
    "last_modified": "2026-06-16 22:26:32",
    "cvss_score": "7.5",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
    "cwe": "CWE-94",
    "description": "Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL with a trailing slash (/) character in the (1) lang_path parameter to (a) cms/plugins/col_man/column.inc.php, (b) cms/plugins/poll/poll.inc.php, (c) cms/plugins/user_managment/usrPortrait.inc.php, (d) cms/plugins/user_managment/user.inc.php, (e) cms/plugins/media_manager/media.inc.php, (f) cms/plugins/events/permanent.eventMonth.inc.php, (g) cms/plugins/events/events.inc.php, and (h) cms/plugins/newsletter2/newsletter.inc.php; (2) path[cb] parameter to (i) modules/guestbook/guestbook.inc.php, (j) modules/shoutbox/shoutBox.php, and (k) modules/sitemap/sitemap.inc.php; and the (3) rel parameter to (l) modules/download/overview.inc.php, (m) modules/download/detailView.inc.php, (n) modules/article/fullarticle.inc.php, (o) modules/article/comments.inc.php, (p) modules/article2/overview.inc.php, (q) modules/article2/fullarticle.inc.php, (r) modules/article2/comments.inc.php, (s) modules/headline/headlineBox.php, and (t) modules/headline/showHeadline.inc.php.",
    "epss_score": "0.15646",
    "epss_percentile": "0.96744",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-30 18:17:05",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "content\\*builder",
            "product": "content\\*builder"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "1903",
            "title": "Content-Builder (CMS) 0.7.5 - Multiple Include Vulnerabilities",
            "date": "2006-06-11",
            "url": "https://www.exploit-db.com/exploits/1903"
        }
    ],
    "refs_list": [
        "http://marc.info/?l=bugtraq&m=115016951316696&w=2",
        "http://secunia.com/advisories/20557",
        "http://www.osvdb.org/26344",
        "http://www.osvdb.org/26345",
        "http://www.osvdb.org/26346",
        "http://www.osvdb.org/26347",
        "http://www.osvdb.org/26348",
        "http://www.osvdb.org/26349",
        "http://www.osvdb.org/26350",
        "http://www.osvdb.org/26351",
        "http://www.osvdb.org/26352",
        "http://www.osvdb.org/26353",
        "http://www.osvdb.org/26354",
        "http://www.osvdb.org/26355",
        "http://www.osvdb.org/26356",
        "http://www.osvdb.org/26357",
        "http://www.osvdb.org/26358",
        "http://www.osvdb.org/26359",
        "http://www.osvdb.org/26360",
        "http://www.osvdb.org/26361",
        "http://www.osvdb.org/26362",
        "http://www.osvdb.org/26363",
        "http://www.securityfocus.com/bid/18404",
        "http://www.vupen.com/english/advisories/2006/2300",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/27044"
    ]
}