CVE-2006-4962

Php Blue Dragon <2.9.1 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2006-4962. PoCs published by Kacper.

AI-analyzed exploit summary This exploit targets Php Blue Dragon CMS 3.0.0 by leveraging a local file inclusion vulnerability to execute arbitrary commands via log file poisoning. It authenticates as a registered user and attempts to include malicious PHP code from server log files.

Description

Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Kacper · phpwebappsphp
https://www.exploit-db.com/exploits/4277

This exploit targets Php Blue Dragon CMS 3.0.0 by leveraging a local file inclusion vulnerability to execute arbitrary commands via log file poisoning. It authenticates as a registered user and attempts to include malicious PHP code from server log files.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Php Blue Dragon CMS 3.0.0
Auth required
Prerequisites: Valid user credentials · Access to server log files · PHP Blue Dragon CMS 3.0.0 installation
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by Kacper · phpwebappsphp
https://www.exploit-db.com/exploits/2402

This exploit leverages a combination of SQL injection and XSS vulnerabilities in PhpBlueDragon CMS <= 2.9 to achieve remote code execution by injecting malicious PHP code into the registration and login forms, then triggering execution via a log file inclusion vulnerability.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: PhpBlueDragon CMS v2.9
No auth needed
Prerequisites: register_globals=On · target server with vulnerable PhpBlueDragon CMS installation
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (7)

Core 7
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22031
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4277
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3736
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29067
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/2402
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25264
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20123

Scores

EPSS 0.0326
EPSS Percentile 86.7%

Details

Status published
Products (2)
blue_dragon/php_blue_dragon platinum_2.8.0
blue_dragon/php_blue_dragon platinum_2.9.1
Published Sep 23, 2006
Tracked Since Feb 18, 2026