Unrated severityNVD Advisory· Published Jan 20, 2006· Updated Jun 16, 2026

CVE-2006-0325

Description

Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter.

Affected products

Etomite/Etomite2 versions
cpe:2.3:a:etomite:etomite:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:etomite:etomite:*:*:*:*:*:*:*:*range: <=0.6
- (no CPE)range: <=0.6

Patches

Vulnerability mechanics

References

secunia.com/advisories/18556nvdPatchVendor Advisory
www.etomite.org/forums/index.phpnvd
www.etomite.org/forums/index.phpnvd
www.lucaercoli.it/advs/etomite.txtnvd
www.osvdb.org/22693nvd
www.securityfocus.com/archive/1/423497/100/0/threadednvd
www.securityfocus.com/archive/1/423523/100/0/threadednvd
www.securityfocus.com/bid/16336nvd
www.vupen.com/english/advisories/2006/0283nvd
exchange.xforce.ibmcloud.com/vulnerabilities/24254nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000