CVE-2006-5894

Rama CMS < 0.68 - Directory Traversal via Lang Cookie

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-5894. PoCs published by Kacper.

AI-analyzed exploit summary This exploit targets a Local File Include (LFI) vulnerability in Rama CMS <= 0.68 via the 'lang' cookie parameter. It injects malicious PHP code into log files and then includes them to achieve remote code execution (RCE).

Description

Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by lang.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Kacper · phpwebappsphp
https://www.exploit-db.com/exploits/2760

This exploit targets a Local File Include (LFI) vulnerability in Rama CMS <= 0.68 via the 'lang' cookie parameter. It injects malicious PHP code into log files and then includes them to achieve remote code execution (RCE).

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Rama CMS v.0.68
No auth needed
Prerequisites: register_globals=On · access to log files
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21009
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4473
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22847
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/2760
Exploit x_refsource_misc
http://www.rahim.webd.pl/exploit127.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30183

Scores

EPSS 0.0251
EPSS Percentile 82.6%

Details

Status published
Products (1)
rama_cms/rama_cms < 0.68
Published Nov 14, 2006
Tracked Since Feb 18, 2026