Unrated severityNVD Advisory· Published Jul 10, 2006· Updated Jun 16, 2026
CVE-2006-3475
CVE-2006-3475
Description
Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter to (1) index.php, (2) about.php, (3) contact.php, (4) delete.php, (5) faq.php, (6) features.php or (7) history.php, a different set of vectors than CVE-2006-2998.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- cpe:2.3:a:free_qboard:free_qboard:1.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
14- www.securityfocus.com/bid/18788nvdExploit
- securityreason.com/securityalert/1233nvd
- securitytracker.com/idnvd
- www.osvdb.org/28059nvd
- www.osvdb.org/28060nvd
- www.osvdb.org/28061nvd
- www.osvdb.org/28062nvd
- www.osvdb.org/28063nvd
- www.osvdb.org/28064nvd
- www.osvdb.org/28065nvd
- www.securityfocus.com/archive/1/438951/100/0/threadednvd
- www.securityfocus.com/archive/1/453293/100/0/threadednvd
- www.securityfocus.com/bid/21394nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/27040nvd
News mentions
0No linked articles in our index yet.