CVE-2006-2826

HIGH · CVSS 7.5 EPSS 3.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-06-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-2826

Severity

HIGH

CVSS

7.5

EPSS

3.12%

Original NVD Description

SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute arbitrary SQL commands via the id variable, which is set by a client through a query string or a cookie.