CVE-2006-1032

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-07 · updated 2026-06-16

Description

Eval injection vulnerability in the decode function in rpc_decoder.php for phpRPC 0.7 and earlier, as used by runcms, exoops, and possibly other programs, allows remote attackers to execute arbitrary PHP code via the base64 tag.

Affected products

Phprpc: 0.7, 0.8, 0.9

References

http://secunia.com/advisories/19028
http://secunia.com/advisories/19058
http://securityreason.com/securityalert/502
http://securitytracker.com/id?1015691
http://www.gulftech.org/?node=research&article_id=00105-02262006
http://www.securityfocus.com/archive/1/426193
http://www.securityfocus.com/bid/16833
http://www.vupen.com/english/advisories/2006/0745
http://secunia.com/advisories/19028
http://secunia.com/advisories/19058
http://securityreason.com/securityalert/502
http://securitytracker.com/id?1015691

Get alerted when CVE-2006-1032 or the next vulnerability affects your stack