CVE-2006-5068

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.83%

Published

Sep 28, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBBrudaGB 1.1 - '/admin/index.php' Remote File Inclusion Exploit-DBBrudaNews 1.1 - '/admin/index.php' Remote File Inclusion TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the o parameter.

Affected Products (1)

brudaswen · brudanewsvulnerable

References (16)

http://secunia.com/advisories/22115

ExploitVendor Advisory

http://www.osvdb.org/29176

Exploit

http://www.securityfocus.com/bid/20192

Exploit

http://www.vupen.com/english/advisories/2006/3773

https://exchange.xforce.ibmcloud.com/vulnerabilities/29141

https://exchange.xforce.ibmcloud.com/vulnerabilities/29142

https://www.exploit-db.com/exploits/2432

https://www.exploit-db.com/exploits/2433

http://secunia.com/advisories/22115

ExploitVendor Advisory

http://www.osvdb.org/29176

Exploit

http://www.securityfocus.com/bid/20192

Exploit

http://www.vupen.com/english/advisories/2006/3773

https://exchange.xforce.ibmcloud.com/vulnerabilities/29141

https://exchange.xforce.ibmcloud.com/vulnerabilities/29142

https://www.exploit-db.com/exploits/2432

https://www.exploit-db.com/exploits/2433

KEV Catalog EPSS Scores Vendors All CVEs