AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-5678

CRITICAL · CVSS 9.8 EPSS 1.93%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-11-03 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.

CVE
CVE-2006-5678
Severity
CRITICAL
CVSS
9.8
EPSS
1.93%

Original NVD Description

PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvc_modules_dir parameter. NOTE: CVE disputes this vulnerability, because the inclusion occurs in a function that is not called during a direct request to library.inc.php