CVE-2006-1819 json
Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to inclu…
published 2006-04-18 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-1819
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.0%
- EPSS 4.0% chance of exploitation in 30 days, percentile 90%
- public exploits
- 0
- none known
Summary
Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to include arbitrary local files and execute arbitrary PHP code via the hub_dir parameter, as demonstrated by including access_log. NOTE: in some cases, arbitrary remote file inclusion could be performed under PHP 5 using an SMB share argument such as "\\systemname\sharename".
Exploit prediction
3.97% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- exploit-db.com https://www.exploit-db.com/exploits/1673 referenced PoC, tagged "exploit" by a source, unverified
- securityfocus.com http://www.securityfocus.com/bid/17521 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
exploit-db.com
/exploits/1673
exploit
-
securityfocus.com
/bid/17521
vdb-entry, exploit
-
gentoo.org
/security/en/glsa/glsa-200605-04.xml
vendor-advisory
-
securitytracker.com
/id?1015942
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/25867
vdb-entry
-
vupen.com
/english/advisories/2006/1361
vdb-entry
-
secunia.com
/advisories/19647
third-party-advisory
-
secunia.com
/advisories/19914
third-party-advisory
- downloads.securityfocus.com /vulnerabilities/exploits/PHPWebSite_fi_poc
Sources
- CVE List CVE-2006-1819
- NVD CVE-2006-1819
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.