CVE-2006-5089

Jim Plush My-BIC 0.6.5 - Remote File Inclusion via mybic_server.php file Parameter

Title source: manual
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-5089. PoCs published by Root3r_H3ll.

AI-analyzed exploit summary The provided text describes a retired remote file-include vulnerability in My-BIC, but lacks actual exploit code. It references a non-exploitable issue and provides a generic example URL without functional PoC details.

Description

PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this vulnerability because the file variable is defined before use in a way that prevents arbitrary inclusion

Exploits (1)

exploitdb WRITEUP VERIFIED
by Root3r_H3ll · textwebappsphp
https://www.exploit-db.com/exploits/28686

The provided text describes a retired remote file-include vulnerability in My-BIC, but lacks actual exploit code. It references a non-exploitable issue and provides a generic example URL without functional PoC details.

Classification
Writeup 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: My-BIC (version unspecified)
No auth needed
Prerequisites: Network access to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Scores

EPSS 0.0209
EPSS Percentile 79.2%

Details

Status published
Products (1)
my-bic/my-bic 0.6.5
Published Sep 29, 2006
Tracked Since Feb 18, 2026