CVE-2006-5911 json
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code v…
published 2006-11-15 19 y ago modified 2026-06-16 4 mo ago also EUVD-2006-5894
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.5%
- EPSS 7.5% chance of exploitation in 30 days, percentile 94%
- public exploits
- 38
- Exploit-DB
Summary
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/.
Patch / fix
Timeline
- Published
- First public exploit (EDB-30006)
Exploit prediction
7.45% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-30006 Campsite 2.6.1 - 'LocalizerLanguage.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-30005 Campsite 2.6.1 - 'LocalizerConfig.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-30004 Campsite 2.6.1 - '/implementation/Management/db_connect.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-30003 Campsite 2.6.1 - '/implementation/Management/configuration.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29999 Campsite 2.6.1 - 'UserType.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29998 Campsite 2.6.1 - 'user.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29997 Campsite 2.6.1 - 'UrlType.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29996 Campsite 2.6.1 - 'topic.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29995 Campsite 2.6.1 - 'TimeUnit.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29994 Campsite 2.6.1 - 'template.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29993 Campsite 2.6.1 - 'SystemPref.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29992 Campsite 2.6.1 - 'SubscriptionSection.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29991 Campsite 2.6.1 - 'SubscriptionDefaultTime.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29990 Campsite 2.6.1 - 'Subscription.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29989 Campsite 2.6.1 - 'ShortURL.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29988 Campsite 2.6.1 - 'Section.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29987 Campsite 2.6.1 - 'Publication.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29986 Campsite 2.6.1 - 'LoginAttempts.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29985 Campsite 2.6.1 - 'Log.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29984 Campsite 2.6.1 - 'Language.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29983 Campsite 2.6.1 - 'IssuePublish.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29982 Campsite 2.6.1 - 'issue.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29981 Campsite 2.6.1 - 'image.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29980 Campsite 2.6.1 - 'IPAccess.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29979 Campsite 2.6.1 - 'Event.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29978 Campsite 2.6.1 - 'DatabaseObject.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29977 Campsite 2.6.1 - 'Country.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29976 Campsite 2.6.1 - 'ArticleTypeField.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29975 Campsite 2.6.1 - 'ArticleType.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29974 Campsite 2.6.1 - 'ArticleTopic.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29973 Campsite 2.6.1 - 'ArticlePublish.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29972 Campsite 2.6.1 - 'ArticleIndex.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29971 Campsite 2.6.1 - 'ArticleImage.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29970 Campsite 2.6.1 - 'ArticleData.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29969 Campsite 2.6.1 - 'ArticleComment.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29968 Campsite 2.6.1 - 'ArticleAttachment.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29967 Campsite 2.6.1 - 'article.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
- EDB-29966 Campsite 2.6.1 - 'Alias.php?g_documentRoot' Remote File Inclusion webapps, 2007-05-08
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
sourceforge.net
/project/shownotes.php?release_id=459574&group_id=66936
patch
-
code.campware.org
/projects/campsite/changeset/6057
patch
-
code.campware.org
/projects/campsite/changeset/6058
patch
-
osvdb.org
/34217
vdb-entry
-
osvdb.org
/34215
vdb-entry
-
osvdb.org
/34189
vdb-entry
-
osvdb.org
/34214
vdb-entry
-
osvdb.org
/34198
vdb-entry
-
osvdb.org
/34195
vdb-entry
-
osvdb.org
/34205
vdb-entry
-
osvdb.org
/34187
vdb-entry
-
osvdb.org
/34208
vdb-entry
-
osvdb.org
/34216
vdb-entry
- code.campware.org /projects/campsite/ticket/2349
-
osvdb.org
/34224
vdb-entry
- code.campware.org /projects/campsite/query?milestone=2.6.2
-
osvdb.org
/34197
vdb-entry
-
osvdb.org
/34221
vdb-entry
-
osvdb.org
/34213
vdb-entry
-
osvdb.org
/34209
vdb-entry
-
osvdb.org
/34211
vdb-entry
-
osvdb.org
/34191
vdb-entry
-
osvdb.org
/34225
vdb-entry
-
osvdb.org
/34203
vdb-entry
-
osvdb.org
/34200
vdb-entry
-
osvdb.org
/34222
vdb-entry
-
osvdb.org
/34223
vdb-entry
-
osvdb.org
/34218
vdb-entry
-
osvdb.org
/34206
vdb-entry
-
osvdb.org
/34199
vdb-entry
-
osvdb.org
/34196
vdb-entry
-
osvdb.org
/34219
vdb-entry
-
osvdb.org
/34201
vdb-entry
-
securityfocus.com
/bid/23874
vdb-entry
-
osvdb.org
/34192
vdb-entry
-
osvdb.org
/34210
vdb-entry
-
osvdb.org
/34188
vdb-entry
-
osvdb.org
/34204
vdb-entry
-
osvdb.org
/34202
vdb-entry
-
osvdb.org
/34190
vdb-entry
- osvdb.org /34193
- osvdb.org /34194
- osvdb.org /34207
- osvdb.org /34212
- osvdb.org /34220
Sources
- CVE List CVE-2006-5911
- NVD CVE-2006-5911
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.