VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 6, 2006· Updated Jun 16, 2026

CVE-2006-2864

CVE-2006-2864

Description

Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) APP[path][applications] parameter to (a) Bs_Faq.class.php, (2) APP[path][core] parameter to (b) fileBrowserInner.php, (c) file.php, and (d) viewer.php, and (e) Bs_ImageArchive.class.php, (3) GLOBALS[APP][path][core] parameter to (f) Bs_Ml_User.class.php, or (4) APP[path][plugins] parameter to (g) Bs_Wse_Profile.class.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Blueshoes/Framework3 versions
    cpe:2.3:a:blueshoes:blueshoes_framework:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:blueshoes:blueshoes_framework:*:*:*:*:*:*:*:*range: <=4.6
    • cpe:2.3:a:blueshoes:blueshoes_framework:4.5:*:*:*:*:*:*:*
    • (no CPE)range: = 4.6

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.