CVE-2006-3928
WMNews < 0.2a - Remote File Inclusion via base_datapath Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-3928. PoCs published by uNfz.
AI-analyzed exploit summary This is a writeup describing a remote file inclusion vulnerability in WMNews. It provides search dorks and exploitation paths but lacks actual exploit code.
Description
PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_datapath parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by uNfz · textwebappsphp
https://www.exploit-db.com/exploits/2077
This is a writeup describing a remote file inclusion vulnerability in WMNews. It provides search dorks and exploitation paths but lacks actual exploit code.
Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target:
WMNews (version not specified)
No auth needed
Prerequisites:
Target application must be accessible · Allow URL inclusion must be enabled
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
References (6)
Core 6
Core References
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3013
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21234
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/2077
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/27547
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/19187
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28029
Scores
EPSS
0.0319
EPSS Percentile
86.7%
Details
Status
published
Products (1)
mikael_software/wmnews
< 0.2a
Published
Jul 31, 2006
Tracked Since
Feb 18, 2026