{"id":"CVE-2006-5506","state":"PUBLISHED","title":"Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1) inc/prepend.inc.php, (2) inc/l","description":"Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1) inc/prepend.inc.php, (2) inc/lib/boxes.lib.php, (3) inc/lib/tools.lib.php, (4) tools/trackback/index.php, and (5) tools/utf8conversion/index.php in admin/; and (6) prepend.inc.php, (7) lib/boxes.lib.php, and (8) lib/history.lib.php in inc/.","publishedAt":"2006-10-25T22:00:00.000Z","updatedAt":"2024-08-07T19:55:53.023Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://wiclear.free.fr/?Download","http://www.osvdb.org/29944","http://www.vupen.com/english/advisories/2006/4166","https://exchange.xforce.ibmcloud.com/vulnerabilities/29720","http://www.osvdb.org/29948","http://www.osvdb.org/29943","http://www.osvdb.org/29947","http://www.osvdb.org/29945","http://secunia.com/advisories/22547","http://www.osvdb.org/29946","https://www.exploit-db.com/exploits/2624","http://www.osvdb.org/29949","http://wiclear.free.fr/","http://www.osvdb.org/29942"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:54.716Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2006/5xxx/CVE-2006-5506.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2006-5506","state":"PUBLISHED","datePublished":"2006-10-25T22:00:00.000Z","dateUpdated":"2024-08-07T19:55:53.023Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2006-10-25T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1) inc/prepend.inc.php, (2) inc/lib/boxes.lib.php, (3) inc/lib/tools.lib.php, (4) tools/trackback/index.php, and (5) tools/utf8conversion/index.php in admin/; and (6) prepend.inc.php, (7) lib/boxes.lib.php, and (8) lib/history.lib.php in inc/."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://wiclear.free.fr/?Download","tags":["x_refsource_CONFIRM"]},{"url":"http://www.osvdb.org/29944","name":"29944","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.vupen.com/english/advisories/2006/4166","name":"ADV-2006-4166","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29720","name":"wiclear-path-file-include(29720)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.osvdb.org/29948","name":"29948","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.osvdb.org/29943","name":"29943","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.osvdb.org/29947","name":"29947","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.osvdb.org/29945","name":"29945","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://secunia.com/advisories/22547","name":"22547","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.osvdb.org/29946","name":"29946","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"https://www.exploit-db.com/exploits/2624","name":"2624","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.osvdb.org/29949","name":"29949","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://wiclear.free.fr/","tags":["x_refsource_CONFIRM"]},{"url":"http://www.osvdb.org/29942","name":"29942","tags":["vdb-entry","x_refsource_OSVDB"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2017-10-18T16:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2006-10-23T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-5506","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1) inc/prepend.inc.php, (2) inc/lib/boxes.lib.php, (3) inc/lib/tools.lib.php, (4) tools/trackback/index.php, and (5) tools/utf8conversion/index.php in admin/; and (6) prepend.inc.php, (7) lib/boxes.lib.php, and (8) lib/history.lib.php in inc/."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://wiclear.free.fr/?Download","refsource":"CONFIRM","url":"http://wiclear.free.fr/?Download"},{"name":"29944","refsource":"OSVDB","url":"http://www.osvdb.org/29944"},{"name":"ADV-2006-4166","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/4166"},{"name":"wiclear-path-file-include(29720)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29720"},{"name":"29948","refsource":"OSVDB","url":"http://www.osvdb.org/29948"},{"name":"29943","refsource":"OSVDB","url":"http://www.osvdb.org/29943"},{"name":"29947","refsource":"OSVDB","url":"http://www.osvdb.org/29947"},{"name":"29945","refsource":"OSVDB","url":"http://www.osvdb.org/29945"},{"name":"22547","refsource":"SECUNIA","url":"http://secunia.com/advisories/22547"},{"name":"29946","refsource":"OSVDB","url":"http://www.osvdb.org/29946"},{"name":"2624","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/2624"},{"name":"29949","refsource":"OSVDB","url":"http://www.osvdb.org/29949"},{"name":"http://wiclear.free.fr/","refsource":"CONFIRM","url":"http://wiclear.free.fr/"},{"name":"29942","refsource":"OSVDB","url":"http://www.osvdb.org/29942"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://wiclear.free.fr/?Download","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.osvdb.org/29944","name":"29944","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/4166","name":"ADV-2006-4166","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29720","name":"wiclear-path-file-include(29720)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.osvdb.org/29948","name":"29948","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/29943","name":"29943","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/29947","name":"29947","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/29945","name":"29945","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://secunia.com/advisories/22547","name":"22547","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.osvdb.org/29946","name":"29946","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/2624","name":"2624","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://www.osvdb.org/29949","name":"29949","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://wiclear.free.fr/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.osvdb.org/29942","name":"29942","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T19:55:53.023Z"}}]}}}