Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attacker…

published 2006-06-23 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3190

cvss: 5.1; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 14.8%; EPSS 14.8% chance of exploitation in 30 days, percentile 96%
public exploits: 1; Exploit-DB

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) includes/content/contact_content.php; multiple files in adminpanel/includes/add_forms/ including (2) addbioform.php, (3) addfliersform.php, (4) addgenmerchform.php, (5) addinterviewsform.php, (6) addlinksform.php, (7) addlyricsform.php, (8) addmembioform.php, (9) addmerchform.php, (10) addmerchpicform.php, (11) addnewsform.php, (12) addphotosform.php, (13) addreleaseform.php, (14) addreleasepicform.php, (15) addrelmerchform.php, (16) addreviewsform.php, (17) addshowsform.php, (18) addwearmerchform.php; (19) adminpanel/includes/mailinglist/disphtmltbl.php, and (20) adminpanel/includes/mailinglist/dispxls.php.

Timeline

2006-06-20 First public exploit (EDB-1933)
2006-06-23 Published

Exploit prediction

14.85% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-1933 BandSite CMS 1.1.1 - 'ROOT_PATH' Remote File Inclusion webapps, 2006-06-20
osvdb.org http://www.osvdb.org/27251 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27242 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27245 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27250 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27252 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27240 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27241 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27244 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27248 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27249 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27247 referenced PoC, tagged "exploit" by a source, unverified
osvdb.org http://www.osvdb.org/27243 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	5.1	AV:N/AC:H/Au:N/C:P/I:P/A:P

Classification

Weakness

CWE-94 Improper Control of Generation of Code

References

exploit-db.com /exploits/1933
exploit
osvdb.org /27251
vdb-entry, exploit
osvdb.org /27242
vdb-entry, exploit
osvdb.org /27245
vdb-entry, exploit
osvdb.org /27250
vdb-entry, exploit
osvdb.org /27252
vdb-entry, exploit
osvdb.org /27240
vdb-entry, exploit
osvdb.org /27241
vdb-entry, exploit
osvdb.org /27244
vdb-entry, exploit
osvdb.org /27248
vdb-entry, exploit
osvdb.org /27249
vdb-entry, exploit
osvdb.org /27247
vdb-entry, exploit
osvdb.org /27243
vdb-entry, exploit
secunia.com /advisories/20768
third-party-advisory, vendor-advisory
vupen.com /english/advisories/2006/2462
vdb-entry, vendor-advisory
sourceforge.net /project/shownotes.php?release_id=428062
osvdb.org /27238
vdb-entry
osvdb.org /27246
vdb-entry
osvdb.org /27235
vdb-entry
securityfocus.com /bid/18555
vdb-entry
osvdb.org /27233
vdb-entry
osvdb.org /27234
vdb-entry
osvdb.org /27236
vdb-entry
osvdb.org /27239
vdb-entry
osvdb.org /27237
vdb-entry

Sources

CVE List CVE-2006-3193
NVD CVE-2006-3193

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary