CVE-2006-5124

phpMyWebmin 1.0 - RCE

Title source: llm

Description

Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) target and (2) action parameters in window.php, and possibly the (3) target parameter in home.php.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Kernel-32 · textwebappsphp
https://www.exploit-db.com/exploits/2451
exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/2462

Scores

EPSS 0.1707
EPSS Percentile 94.9%

Classification

Status draft

Affected Products (1)

joshua_muheim/phpmywebmin

Timeline

Published Oct 03, 2006
Tracked Since Feb 18, 2026