CVE-2006-4366

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-08-26 · updated 2026-06-16

Description

PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected products

Redblog: 0.5

References

http://www.osvdb.org/30311
http://www.securityfocus.com/bid/19658
http://www.securityfocus.com/data/vulnerabilities/exploits/19658-rfi.html
http://www.osvdb.org/30311
http://www.securityfocus.com/bid/19658
http://www.securityfocus.com/data/vulnerabilities/exploits/19658-rfi.html

Get alerted when CVE-2006-4366 or the next vulnerability affects your stack