VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 25, 2006· Updated Apr 16, 2026

CVE-2006-2008

CVE-2006-2008

Description

PHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path parameter.

Affected products

3
  • Built2go/Movie Review3 versions
    cpe:2.3:a:built2go:movie_review:1a:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:built2go:movie_review:1a:*:*:*:*:*:*:*
    • cpe:2.3:a:built2go:movie_review:2a:*:*:*:*:*:*:*
    • cpe:2.3:a:built2go:movie_review:2b:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.