CVE-2006-6809 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 2.4% (pctl 84)
Patch early
A public exploit exists.
Description
Multiple PHP remote file inclusion vulnerabilities in process.php in Vladimir Menshakov buratinable templator (aka bubla) 1.0.0rc2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) bu_dir or (2) bu_config[dir] parameter.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 2.43% — more likely to be exploited than 84% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-12-29 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| vladimir menshakov | buratinable templator |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Bubla 1.0.0rc2 - '/bu/process.php' Remote File Inclusion | 2006-12-27 |
References
- http://www.securityfocus.com/bid/21793
- http://www.vupen.com/english/advisories/2006/5195
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31135
- https://www.exploit-db.com/exploits/3026
- http://www.securityfocus.com/bid/21793
- http://www.vupen.com/english/advisories/2006/5195
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31135
- https://www.exploit-db.com/exploits/3026
→ the Explorer · watch your stack · NVD