Unrated severityNVD Advisory· Published Oct 10, 2006· Updated Jun 16, 2026
CVE-2006-5186
CVE-2006-5186
Description
PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pmp_rel_path parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=0.9.6+ 1 more
- (no CPE)range: <=0.9.6
- cpe:2.3:a:phpmyprofiler:phpmyprofiler:*:*:*:*:*:*:*:*range: <=0.9.6
Patches
Vulnerability mechanics
References
10- forum.phpmyprofiler.de/viewtopic.phpnvdPatch
- secunia.com/advisories/22144nvdPatchVendor Advisory
- www.phpmyprofiler.de/index.phpnvdPatch
- securitytracker.com/idnvdExploitPatch
- www.securityfocus.com/bid/20324nvdExploit
- securityreason.com/securityalert/1696nvd
- www.securityfocus.com/archive/1/447646/100/0/threadednvd
- www.vupen.com/english/advisories/2006/3896nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/29335nvd
- www.exploit-db.com/exploits/2470nvd
News mentions
0No linked articles in our index yet.