Skip to content
Fencer Vulns
medium 4.0

CVE-2006-2685 json

PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_globals enabled, allo…

published 2006-05-31 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-2684

cvss
4.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
49.2%
EPSS 49.2% chance of exploitation in 30 days, percentile 98%
public exploits
4
Metasploit, Exploit-DB

Summary

PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the BASE_path parameter to (1) base_qry_common.php, (2) base_stat_common.php, and (3) includes/base_include.inc.php.

Patch / fix

Timeline

  1. First public exploit (EDB-1823)
  2. Published

Exploit prediction

49.19% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • Metasploit exploit/unix/webapp/base_qry_common BASE base_qry_common Remote File Include metasploit exploit, excellent rank, 2008-06-14
  • EDB-16897 BASE - 'base_qry_common' Remote File Inclusion (Metasploit) webapps, 2010-11-24
  • EDB-9908 BASE 1.2.4 - 'base_qry_common.php' Remote File Inclusion (Metasploit) webapps, 2008-06-14
  • EDB-1823 BASE 1.2.4 - melissa Snort Frontend Remote File Inclusion webapps, 2006-05-25
  • secunia.com http://secunia.com/advisories/20300 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 4.0 AV:N/AC:H/Au:N/C:P/I:P/A:N

Classification

Weakness
  • CWE-94 Improper Control of Generation of Code

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.