Unrated severityNVD Advisory· Published Oct 12, 2006· Updated Apr 23, 2026
CVE-2006-5255
CVE-2006-5255
Description
PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13 allows remote attackers to execute arbitrary PHP code via a URL in the languagefile parameter. NOTE: another researcher has observed that languageFile is defined before use. CVE analysis as of 20061012 concurs with the dispute
Affected products
1- cpe:2.3:a:greg_neustaetter:gcards:1.13:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.