CVE-2006-3532

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

8.04%

Published

Jul 12, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBPivot 1.30 RC2 - Privilege Escalation / Remote Code Execution TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

PHP file inclusion vulnerability in includes/edit_new.php in Pivot 1.30 RC2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Paths[extensions_path] parameter.

Affected Products (1)

pivot · pivotvulnerable

References (14)

http://retrogod.altervista.org/pivot_130RC2_xpl.html

Exploit

http://secunia.com/advisories/20962

Vendor Advisory

http://securityreason.com/securityalert/1214

http://www.osvdb.org/27512

http://www.securityfocus.com/archive/1/439495/100/0/threaded

http://www.securityfocus.com/bid/18881

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/27679

http://retrogod.altervista.org/pivot_130RC2_xpl.html

Exploit

http://secunia.com/advisories/20962

Vendor Advisory

http://securityreason.com/securityalert/1214

http://www.osvdb.org/27512

http://www.securityfocus.com/archive/1/439495/100/0/threaded

http://www.securityfocus.com/bid/18881

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/27679

KEV Catalog EPSS Scores Vendors All CVEs