Unrated severityNVD Advisory· Published Feb 10, 2006· Updated Apr 16, 2026
CVE-2006-0636
CVE-2006-0636
Description
desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote attackers to execute arbitrary PHP code and possibly conduct other attacks by modifying critical assumed-immutable variables, as demonstrated using PHP code in the _SESSION[apps][eyeOptions.eyeapp][wrapup] variable.
Affected products
18cpe:2.3:o:eyeos_project:eyeos:0.8.3:*:*:*:*:*:*:*+ 17 more
- cpe:2.3:o:eyeos_project:eyeos:0.8.3:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.3_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.3_r2:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.4:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.1_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2_r2:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.2_r3:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.4_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.5:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.5_r1:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.6:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.7:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.8:*:*:*:*:*:*:*
- cpe:2.3:o:eyeos_project:eyeos:0.8.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.gulftech.orgnvdPatchVendor Advisory
- secunia.com/advisories/18757nvd
- securityreason.com/securityalert/419nvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/424329/100/0/threadednvd
- www.securityfocus.com/bid/16537nvd
- www.vupen.com/english/advisories/2006/0466nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/24569nvd
News mentions
0No linked articles in our index yet.