CVE-2006-2859
First published: Tue Jun 06 2006(Updated: )
** DISPUTED ** PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mybloggie_root_path parameter to (1) admin.php or (2) scode.php. NOTE: this issue has been disputed in multiple third party followups, which say that the MyBloggie source code does not demonstrate the issue, so it might be the result of another module. CVE analysis as of 20060605 agrees with the dispute. In addition, scode.php is not part of the MyBloggie distribution.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| myWebland myBloggie | =2.1.1 | |
| =2.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2006-2859?
CVE-2006-2859 is classified as a remote file inclusion vulnerability which can lead to arbitrary code execution.
How do I fix CVE-2006-2859?
To fix CVE-2006-2859, upgrade to a patched version of MyBloggie that addresses the vulnerability.
What software versions are affected by CVE-2006-2859?
CVE-2006-2859 affects MyBloggie version 2.1.1 and earlier.
Can CVE-2006-2859 lead to data compromise?
Yes, successful exploitation of CVE-2006-2859 can allow attackers to execute arbitrary PHP code, potentially compromising sensitive data.
How can I determine if my MyBloggie installation is vulnerable to CVE-2006-2859?
If you are running MyBloggie version 2.1.1 or earlier, your installation is vulnerable to CVE-2006-2859.
- agent/author
- agent/type
- agent/weakness
- agent/references
- agent/severity
- agent/status
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-historical
- vendor/mywebland
- canonical/mywebland mybloggie
- version/mywebland mybloggie/2.1.1
- status/disputed