CVE-2006-1032

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.48%

Published

Mar 7, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBphpRPC < 0.7 - Remote Code Execution Exploit-DBphpRPC Library 0.7 - XML Data Decoding Remote Code Execution (1)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Eval injection vulnerability in the decode function in rpc_decoder.php for phpRPC 0.7 and earlier, as used by runcms, exoops, and possibly other programs, allows remote attackers to execute arbitrary PHP code via the base64 tag.

Affected Products (3)

phprpc · phprpcvulnerable

References (16)

http://secunia.com/advisories/19028

http://secunia.com/advisories/19058

http://securityreason.com/securityalert/502

http://securitytracker.com/id?1015691

http://www.gulftech.org/?node=research&article_id=00105-02262006

Vendor Advisory

http://www.securityfocus.com/archive/1/426193

Vendor Advisory

http://www.securityfocus.com/bid/16833

http://www.vupen.com/english/advisories/2006/0745

http://secunia.com/advisories/19028

http://secunia.com/advisories/19058

http://securityreason.com/securityalert/502

http://securitytracker.com/id?1015691

http://www.gulftech.org/?node=research&article_id=00105-02262006

Vendor Advisory

http://www.securityfocus.com/archive/1/426193

Vendor Advisory

http://www.securityfocus.com/bid/16833

http://www.vupen.com/english/advisories/2006/0745

KEV Catalog EPSS Scores Vendors All CVEs