Unrated severityNVD Advisory· Published Jun 6, 2006· Updated Jun 16, 2026
CVE-2006-2852
CVE-2006-2852
Description
PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter in (1) index.php, (2) feedback.php, and (3) printfriendly.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:dotwidget:dotwidget_cms:1.0.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dotwidget:dotwidget_cms:1.0.6:*:*:*:*:*:*:*
- (no CPE)range: <=1.0.6
Patches
Vulnerability mechanics
References
11- www.majorsecurity.de/advisory/major_rls7.txtnvdExploit
- www.securityfocus.com/bid/18258nvdExploit
- secunia.com/advisories/20463nvdVendor Advisory
- securityreason.com/securityalert/1045nvd
- securitytracker.com/idnvd
- www.osvdb.org/25981nvd
- www.osvdb.org/25983nvd
- www.osvdb.org/displayvuln.phpnvd
- www.securityfocus.com/archive/1/435870/100/0/threadednvd
- www.vupen.com/english/advisories/2006/2141nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26918nvd
News mentions
0No linked articles in our index yet.