CVE Feed

Dashboard / CVE / CVE-2006-5911

CVE-2006-5911

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/.

Published:Nov 15, 2006

Last Modified:Apr 23, 2026

EPS:Nov 15, 2006

EPSS Score:0.03237

CVSS Score:7.5

Affected Products

Vendor

Product

Action

Vendor

Campware.org

Product

Campsite

Campware.org

Campsite

Exploits

https://www.exploit-db.com/exploits/30003 https://www.exploit-db.com/exploits/29966 https://www.exploit-db.com/exploits/29967 https://www.exploit-db.com/exploits/29968 https://www.exploit-db.com/exploits/29969 https://www.exploit-db.com/exploits/29970 https://www.exploit-db.com/exploits/29971 https://www.exploit-db.com/exploits/29972 https://www.exploit-db.com/exploits/29973 https://www.exploit-db.com/exploits/29974 https://www.exploit-db.com/exploits/29975 https://www.exploit-db.com/exploits/29976 https://www.exploit-db.com/exploits/29977 https://www.exploit-db.com/exploits/29978 https://www.exploit-db.com/exploits/29979 https://www.exploit-db.com/exploits/29980 https://www.exploit-db.com/exploits/29981 https://www.exploit-db.com/exploits/29982 https://www.exploit-db.com/exploits/29983 https://www.exploit-db.com/exploits/29984 https://www.exploit-db.com/exploits/29985 https://www.exploit-db.com/exploits/29986 https://www.exploit-db.com/exploits/29987 https://www.exploit-db.com/exploits/29988 https://www.exploit-db.com/exploits/29989 https://www.exploit-db.com/exploits/29990 https://www.exploit-db.com/exploits/29991 https://www.exploit-db.com/exploits/29992 https://www.exploit-db.com/exploits/29993 https://www.exploit-db.com/exploits/29994 https://www.exploit-db.com/exploits/29995 https://www.exploit-db.com/exploits/29996 https://www.exploit-db.com/exploits/29997 https://www.exploit-db.com/exploits/29998 https://www.exploit-db.com/exploits/29999 https://www.exploit-db.com/exploits/30004 https://www.exploit-db.com/exploits/30005 https://www.exploit-db.com/exploits/30006

Common Weakness Enumeration

No CWE recorded yet

Common Attack Pattern Enumeration and Classification (CAPEC)

No CAPEC recorded yet

Related CVEs

CVE-2010-1867 (CVSS 7.5) — SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinym…

CVE-2009-2183 (CVSS 7.5) — Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read …

CVE-2009-2181 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows re…

CVE-2009-2182 (CVSS 6.8) — Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arb…

CVE-2006-5912 (CVSS 10) — Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to …

CVE-2006-5910 (CVSS 7.5) — Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers…

CVE-2005-4661 (CVSS 5) — The notifyendsubs cron job in Campsite before 2.3.3 sends an e-mail message containing a certain unencrypted M…

References

http://code.campware.org/projects/campsite/changeset/6057

http://code.campware.org/projects/campsite/changeset/6058

http://code.campware.org/projects/campsite/query?milestone=2.6.2

http://code.campware.org/projects/campsite/ticket/2349

http://sourceforge.net/project/shownotes.php?release_id=459574&group_id=66936

http://www.osvdb.org/34187

http://www.osvdb.org/34188

http://www.osvdb.org/34189

http://www.osvdb.org/34190

http://www.osvdb.org/34191

http://www.osvdb.org/34192

http://www.osvdb.org/34193

http://www.osvdb.org/34194

http://www.osvdb.org/34195

http://www.osvdb.org/34196

http://www.osvdb.org/34197

http://www.osvdb.org/34198

http://www.osvdb.org/34199

http://www.osvdb.org/34200

http://www.osvdb.org/34201

http://www.osvdb.org/34202

http://www.osvdb.org/34203

http://www.osvdb.org/34204

http://www.osvdb.org/34205

http://www.osvdb.org/34206

http://www.osvdb.org/34207

http://www.osvdb.org/34208

http://www.osvdb.org/34209

http://www.osvdb.org/34210

http://www.osvdb.org/34211

http://www.osvdb.org/34212

http://www.osvdb.org/34213

http://www.osvdb.org/34214

http://www.osvdb.org/34215

http://www.osvdb.org/34216

http://www.osvdb.org/34217

http://www.osvdb.org/34218

http://www.osvdb.org/34219

http://www.osvdb.org/34220

http://www.osvdb.org/34221

http://www.osvdb.org/34222

http://www.osvdb.org/34223

http://www.osvdb.org/34224

http://www.osvdb.org/34225

http://www.securityfocus.com/bid/23874

http://code.campware.org/projects/campsite/changeset/6057

http://code.campware.org/projects/campsite/changeset/6058

http://code.campware.org/projects/campsite/query?milestone=2.6.2

http://code.campware.org/projects/campsite/ticket/2349

http://sourceforge.net/project/shownotes.php?release_id=459574&group_id=66936

http://www.osvdb.org/34187

http://www.osvdb.org/34188

http://www.osvdb.org/34189

http://www.osvdb.org/34190

http://www.osvdb.org/34191

http://www.osvdb.org/34192

http://www.osvdb.org/34193

http://www.osvdb.org/34194

http://www.osvdb.org/34195

http://www.osvdb.org/34196

http://www.osvdb.org/34197

http://www.osvdb.org/34198

http://www.osvdb.org/34199

http://www.osvdb.org/34200

http://www.osvdb.org/34201

http://www.osvdb.org/34202

http://www.osvdb.org/34203

http://www.osvdb.org/34204

http://www.osvdb.org/34205

http://www.osvdb.org/34206

http://www.osvdb.org/34207

http://www.osvdb.org/34208

http://www.osvdb.org/34209

http://www.osvdb.org/34210

http://www.osvdb.org/34211

http://www.osvdb.org/34212

http://www.osvdb.org/34213

http://www.osvdb.org/34214

http://www.osvdb.org/34215

http://www.osvdb.org/34216

http://www.osvdb.org/34217

http://www.osvdb.org/34218

http://www.osvdb.org/34219

http://www.osvdb.org/34220

http://www.osvdb.org/34221

http://www.osvdb.org/34222

http://www.osvdb.org/34223

http://www.osvdb.org/34224

http://www.osvdb.org/34225

http://www.securityfocus.com/bid/23874

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High