CVE-2006-3966

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.32%

Published

Aug 1, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMyNewsGroups 0.6b - 'myng_root' Remote Inclusion TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups :) 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myng_root parameter.

Weaknesses (CWE)

CWE-94

Affected Products (2)

carlos_sanchez_valle · mynewsgroupsvulnerable

php_layers_menu · php_layers_menuvulnerable

References (20)

http://secunia.com/advisories/21263

Vendor Advisory

http://securityreason.com/securityalert/1316

http://securitytracker.com/id?1016613

http://www.bb-pcsecurity.de/sicherheit_266.htm

Exploit

http://www.osvdb.org/27666

http://www.securityfocus.com/archive/1/441734/100/0/threaded

http://www.securityfocus.com/bid/19258

Exploit

http://www.vupen.com/english/advisories/2006/3073

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/28091

https://www.exploit-db.com/exploits/2096

http://secunia.com/advisories/21263

Vendor Advisory

http://securityreason.com/securityalert/1316

http://securitytracker.com/id?1016613

http://www.bb-pcsecurity.de/sicherheit_266.htm

Exploit

http://www.osvdb.org/27666

http://www.securityfocus.com/archive/1/441734/100/0/threaded

http://www.securityfocus.com/bid/19258

Exploit

http://www.vupen.com/english/advisories/2006/3073

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/28091

https://www.exploit-db.com/exploits/2096

KEV Catalog EPSS Scores Vendors All CVEs