Unrated severityNVD Advisory· Published Jun 30, 2006· Updated Jun 16, 2026
CVE-2006-3323
CVE-2006-3323
Description
PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the page parameter. NOTE: the same vector can be used for cross-site scripting, but CVE analysis suggests that this is resultant from file inclusion of HTML or script.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:mastersfusion:mf_piadas:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mastersfusion:mf_piadas:1.0:*:*:*:*:*:*:*
- (no CPE)range: = 1.0
Patches
Vulnerability mechanics
References
11- kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.htmlnvdExploit
- www.securityfocus.com/bid/18676nvdExploit
- www.securityfocus.com/bid/18679nvdExploit
- secunia.com/advisories/20847nvdVendor Advisory
- securityreason.com/securityalert/1172nvd
- www.osvdb.org/26867nvd
- www.osvdb.org/26868nvd
- www.securityfocus.com/archive/1/438496/100/0/threadednvd
- www.vupen.com/english/advisories/2006/2567nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27412nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27415nvd
News mentions
0No linked articles in our index yet.