Unrated severityNVD Advisory· Published Oct 10, 2006· Updated Jun 16, 2026
CVE-2006-5185
CVE-2006-5185
Description
Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse_code function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:hamweather:hamweather:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:hamweather:hamweather:*:*:*:*:*:*:*:*range: <=3.9.8.4
- cpe:2.3:a:hamweather:hamweather:3.9.8.3:*:*:*:*:*:*:*
- (no CPE)range: <=3.9.8.4
Patches
Vulnerability mechanics
References
6- support.hamweather.com/viewtopic.phpnvdPatch
- secunia.com/advisories/22242nvdExploitPatchVendor Advisory
- www.gulftech.orgnvdExploit
- www.securityfocus.com/bid/20311nvdExploitPatch
- www.vupen.com/english/advisories/2006/3881nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/29304nvd
News mentions
0No linked articles in our index yet.