Latest Vulnerabilities with Public Exploits

Updated 25m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

370,126 CVEs tracked 55,267 with exploits 5,136 exploited in wild 1,655 CISA KEV 4,264 Nuclei templates 56,295 vendors 49,341 researchers

55,267 results Clear all

CVE-2006-5387 1 PoC Analysis EPSS 0.03

PlusXL 20_272 and earlier - Remote File Inclusion via phpbb_root_path Parameter

PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Oct 18, 2006 STIX 2.1

CVE-2006-5390 1 PoC Analysis EPSS 0.03

phpBB ACP User Registration Module - Remote Code Execution via phpbb_root_path Parameter

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

CWE-94 Oct 18, 2006 STIX 2.1

CVE-2006-5309 1 PoC Analysis EPSS 0.03

Prillian French < 0.8.0 - Remote File Inclusion via phpbb_root_path Parameter

PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Oct 17, 2006 STIX 2.1

CVE-2006-5310 1 PoC Analysis EPSS 0.06

Les Visiteurs 2.0.1 - Remote Code Execution via lvc_include_dir Parameter

PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter.

CWE-94 Oct 17, 2006 STIX 2.1

CVE-2006-5305 1 PoC Analysis EPSS 0.03

lat2cyr < 1.0.1 - Remote File Inclusion via phpbb_root_path Parameter

PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Oct 17, 2006 STIX 2.1

CVE-2006-5308 1 PoC Analysis EPSS 0.04

Open Conference Systems <1.1.6 - RCE

Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter in (1) include/theme.inc.php or (2) include/footer.inc.php.

Oct 17, 2006 STIX 2.1

CVE-2006-4421 1 PoC Analysis EPSS 0.02

Yapig - Cross-Site Scripting

Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows remote attackers to inject arbitrary web script or HTML via the D_REFRESH_URL parameter.

Aug 29, 2006 STIX 2.1

CVE-2006-7147 1 PoC Analysis EPSS 0.04

phpBB Import Tools Mod 0.1.4 - Remote Code Execution via phpbb_root_path Parameter

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

CWE-94 Mar 07, 2007 STIX 2.1

CVE-2006-7156 1 PoC Analysis EPSS 0.05

Keyword Replacer < 1.0 - Remote File Inclusion via pathToFiles Parameter

PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a module for miniBB, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter.

Mar 07, 2007 STIX 2.1

CVE-2006-7100 1 PoC Analysis EPSS 0.02

phpBB Insert User < 0.1.2 - Remote Code Execution via phpbb_root_path Parameter

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0.1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

CWE-94 Mar 03, 2007 STIX 2.1

CVE-2006-7091 1 PoC Analysis EPSS 0.02

phpht Topsites FREE 1.022b - Remote File Inclusion via config.php fullpath Parameter

PHP remote file inclusion vulnerability in config.php in phpht Topsites FREE 1.022b allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Mar 02, 2007 STIX 2.1

CVE-2006-6634 2 PoCs Analysis EPSS 0.03

ExtCalThai Module < 0.9.1 - Remote File Inclusion via CONFIG_EXT or mosConfig_absolute_path Parameter

Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and earlier component for Mambo allow remote attackers to execute arbitrary PHP code via a URL in (1) the CONFIG_EXT[LANGUAGES_DIR] parameter to admin_events.php, (2) the mosConfig_absolute_path parameter to extcalendar.php, or (3) the CONFIG_EXT[LIB_DIR] parameter to lib/mail.inc.php.

Dec 18, 2006 STIX 2.1

CVE-2006-5472 1 PoC Analysis EPSS 0.09

Softerra PHP Developer Library <1.5.3 - RCE

PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_dir parameter in (1) lib/registry.lib.php, (2) lib/sqlcompose.lib.php, and (3) lib/sqlsearch.lib.php.

Oct 24, 2006 STIX 2.1

CVE-2006-5458 1 PoC Analysis EPSS 0.03

Hinton Design phpht Topsites < 1.0 - Remote File Inclusion via phpht_real_path Parameter

PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute arbitrary PHP code via a URL in the phpht_real_path parameter.

Oct 23, 2006 STIX 2.1

CVE-2006-5411 1 PoC Analysis EPSS 0.03

FreeWPS < 2.11 - Unauthenticated Arbitrary File Upload via upload.php

Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs.

Oct 20, 2006 STIX 2.1

CVE-2006-5312 1 PoC Analysis EPSS 0.02

Ajax Shoutbox < 0.0.5 - Remote File Inclusion via phpbb_root_path Parameter

PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Oct 17, 2006 STIX 2.1

CVE-2006-5301 1 PoC Analysis EPSS 0.06

phpBB SpamBlockerMOD < 1.0.2 - Remote Code Execution via phpbb_root_path Parameter

PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

CWE-94 Oct 17, 2006 STIX 2.1

CVE-2006-5302 1 PoC Analysis EPSS 0.10

Redaction System 1.0000 - Remote Code Execution via PHP File Inclusion

Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang_prefix parameter to (a) conn.php, (b) sesscheck.php, (c) wap/conn.php, or (d) wap/sesscheck.php, or the (2) lang parameter to (e) index.php.

CWE-94 Oct 17, 2006 STIX 2.1

CVE-2006-5306 1 PoC Analysis EPSS 0.03

phpbb journals_system_module < 1.0.2_rc2 - Remote Code Execution via phpbb_root_path Parameter

Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php, or (3) includes/journals_edit.php.

CWE-94 Oct 17, 2006 STIX 2.1

CVE-2006-5307 1 PoC Analysis EPSS 0.09

AFGB GUESTBOOK 2.2 - Remote File Inclusion via Htmls Parameter

Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the Htmls parameter in (1) add.php, (2) admin.php, (3) look.php, or (4) re.php.

Oct 17, 2006 STIX 2.1

Latest Vulnerabilities with Public Exploits

Investigate

Ecosystems

Reference Indexes

Recent Blog Posts

CVEForge Labs

KEV Gaps