{
    "id": "CVE-2006-5911",
    "published": "2006-11-15 15:07:00",
    "last_modified": "2026-06-16 22:32:07",
    "cvss_score": "7.5",
    "cvss_severity": "HIGH",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
    "cwe": null,
    "description": "Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/.",
    "epss_score": "0.04557",
    "epss_percentile": "0.91332",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-06 18:17:05",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "campware.org",
            "product": "campsite"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "29995",
            "title": "Campsite 2.6.1 - 'TimeUnit.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29995"
        },
        {
            "source": "exploit-db",
            "ref_id": "29986",
            "title": "Campsite 2.6.1 - 'LoginAttempts.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29986"
        },
        {
            "source": "exploit-db",
            "ref_id": "29987",
            "title": "Campsite 2.6.1 - 'Publication.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29987"
        },
        {
            "source": "exploit-db",
            "ref_id": "29988",
            "title": "Campsite 2.6.1 - 'Section.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29988"
        },
        {
            "source": "exploit-db",
            "ref_id": "29989",
            "title": "Campsite 2.6.1 - 'ShortURL.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29989"
        },
        {
            "source": "exploit-db",
            "ref_id": "29990",
            "title": "Campsite 2.6.1 - 'Subscription.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29990"
        },
        {
            "source": "exploit-db",
            "ref_id": "29991",
            "title": "Campsite 2.6.1 - 'SubscriptionDefaultTime.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29991"
        },
        {
            "source": "exploit-db",
            "ref_id": "29992",
            "title": "Campsite 2.6.1 - 'SubscriptionSection.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29992"
        },
        {
            "source": "exploit-db",
            "ref_id": "29993",
            "title": "Campsite 2.6.1 - 'SystemPref.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29993"
        },
        {
            "source": "exploit-db",
            "ref_id": "29994",
            "title": "Campsite 2.6.1 - 'template.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29994"
        },
        {
            "source": "exploit-db",
            "ref_id": "29985",
            "title": "Campsite 2.6.1 - 'Log.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29985"
        },
        {
            "source": "exploit-db",
            "ref_id": "29996",
            "title": "Campsite 2.6.1 - 'topic.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29996"
        },
        {
            "source": "exploit-db",
            "ref_id": "29997",
            "title": "Campsite 2.6.1 - 'UrlType.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29997"
        },
        {
            "source": "exploit-db",
            "ref_id": "29998",
            "title": "Campsite 2.6.1 - 'user.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29998"
        },
        {
            "source": "exploit-db",
            "ref_id": "29999",
            "title": "Campsite 2.6.1 - 'UserType.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29999"
        },
        {
            "source": "exploit-db",
            "ref_id": "30003",
            "title": "Campsite 2.6.1 - '/implementation/Management/configuration.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/30003"
        },
        {
            "source": "exploit-db",
            "ref_id": "30004",
            "title": "Campsite 2.6.1 - '/implementation/Management/db_connect.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/30004"
        },
        {
            "source": "exploit-db",
            "ref_id": "30005",
            "title": "Campsite 2.6.1 - 'LocalizerConfig.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/30005"
        },
        {
            "source": "exploit-db",
            "ref_id": "30006",
            "title": "Campsite 2.6.1 - 'LocalizerLanguage.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/30006"
        },
        {
            "source": "exploit-db",
            "ref_id": "29976",
            "title": "Campsite 2.6.1 - 'ArticleTypeField.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29976"
        },
        {
            "source": "exploit-db",
            "ref_id": "29967",
            "title": "Campsite 2.6.1 - 'article.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29967"
        },
        {
            "source": "exploit-db",
            "ref_id": "29968",
            "title": "Campsite 2.6.1 - 'ArticleAttachment.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29968"
        },
        {
            "source": "exploit-db",
            "ref_id": "29969",
            "title": "Campsite 2.6.1 - 'ArticleComment.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29969"
        },
        {
            "source": "exploit-db",
            "ref_id": "29970",
            "title": "Campsite 2.6.1 - 'ArticleData.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29970"
        },
        {
            "source": "exploit-db",
            "ref_id": "29971",
            "title": "Campsite 2.6.1 - 'ArticleImage.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29971"
        },
        {
            "source": "exploit-db",
            "ref_id": "29972",
            "title": "Campsite 2.6.1 - 'ArticleIndex.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29972"
        },
        {
            "source": "exploit-db",
            "ref_id": "29973",
            "title": "Campsite 2.6.1 - 'ArticlePublish.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29973"
        },
        {
            "source": "exploit-db",
            "ref_id": "29974",
            "title": "Campsite 2.6.1 - 'ArticleTopic.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29974"
        },
        {
            "source": "exploit-db",
            "ref_id": "29975",
            "title": "Campsite 2.6.1 - 'ArticleType.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29975"
        },
        {
            "source": "exploit-db",
            "ref_id": "29966",
            "title": "Campsite 2.6.1 - 'Alias.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29966"
        },
        {
            "source": "exploit-db",
            "ref_id": "29977",
            "title": "Campsite 2.6.1 - 'Country.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29977"
        },
        {
            "source": "exploit-db",
            "ref_id": "29978",
            "title": "Campsite 2.6.1 - 'DatabaseObject.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29978"
        },
        {
            "source": "exploit-db",
            "ref_id": "29979",
            "title": "Campsite 2.6.1 - 'Event.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29979"
        },
        {
            "source": "exploit-db",
            "ref_id": "29980",
            "title": "Campsite 2.6.1 - 'IPAccess.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29980"
        },
        {
            "source": "exploit-db",
            "ref_id": "29981",
            "title": "Campsite 2.6.1 - 'image.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29981"
        },
        {
            "source": "exploit-db",
            "ref_id": "29982",
            "title": "Campsite 2.6.1 - 'issue.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29982"
        },
        {
            "source": "exploit-db",
            "ref_id": "29983",
            "title": "Campsite 2.6.1 - 'IssuePublish.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29983"
        },
        {
            "source": "exploit-db",
            "ref_id": "29984",
            "title": "Campsite 2.6.1 - 'Language.php?g_documentRoot' Remote File Inclusion",
            "date": "2007-05-08",
            "url": "https://www.exploit-db.com/exploits/29984"
        }
    ],
    "refs_list": [
        "http://code.campware.org/projects/campsite/changeset/6057",
        "http://code.campware.org/projects/campsite/changeset/6058",
        "http://code.campware.org/projects/campsite/query?milestone=2.6.2",
        "http://code.campware.org/projects/campsite/ticket/2349",
        "http://sourceforge.net/project/shownotes.php?release_id=459574&group_id=66936",
        "http://www.osvdb.org/34187",
        "http://www.osvdb.org/34188",
        "http://www.osvdb.org/34189",
        "http://www.osvdb.org/34190",
        "http://www.osvdb.org/34191",
        "http://www.osvdb.org/34192",
        "http://www.osvdb.org/34193",
        "http://www.osvdb.org/34194",
        "http://www.osvdb.org/34195",
        "http://www.osvdb.org/34196",
        "http://www.osvdb.org/34197",
        "http://www.osvdb.org/34198",
        "http://www.osvdb.org/34199",
        "http://www.osvdb.org/34200",
        "http://www.osvdb.org/34201",
        "http://www.osvdb.org/34202",
        "http://www.osvdb.org/34203",
        "http://www.osvdb.org/34204",
        "http://www.osvdb.org/34205",
        "http://www.osvdb.org/34206"
    ]
}