Unrated severityNVD Advisory· Published Feb 10, 2006· Updated Jun 16, 2026
CVE-2006-0636
CVE-2006-0636
Description
desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote attackers to execute arbitrary PHP code and possibly conduct other attacks by modifying critical assumed-immutable variables, as demonstrated using PHP code in the _SESSION[apps][eyeOptions.eyeapp][wrapup] variable.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:o:eyeos_project:eyeos:0.8:*:*:*:*:*:*:*+ 18 more
- cpe:2.3:o:eyeos_project:eyeos:0.8:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.1_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2_r2:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2_r3:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.3:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.3_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.3_r2:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.4:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.4_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.5:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.5_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.6:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.7:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.8:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.9:*:*:*:*:*:*:*
- (no CPE)range: <=0.8.9
Patches
Vulnerability mechanics
References
8- www.gulftech.orgnvdPatchVendor Advisory
- secunia.com/advisories/18757nvd
- securityreason.com/securityalert/419nvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/424329/100/0/threadednvd
- www.securityfocus.com/bid/16537nvd
- www.vupen.com/english/advisories/2006/0466nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/24569nvd
News mentions
0No linked articles in our index yet.