AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-2608

MEDIUM · CVSS 5.1 EPSS 2.64%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-05-26 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.1. It may be remotely exploitable.

CVE
CVE-2006-2608
Severity
MEDIUM
CVSS
5.1
EPSS
2.64%

Original NVD Description

artmedic newsletter 4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the logfile parameter in a direct request to log.php, which causes the $logfile variable to be redefined to an attacker-controlled value, as demonstrated by injecting PHP code into info.php.