VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 27, 2006· Updated Jun 16, 2026

CVE-2006-5588

CVE-2006-5588

Description

Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when register_globals and magic_quotes_gpc are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter to (1) includes/rss-reader.php or (2) admin/config.php, different vectors than CVE-2006-3185.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • CMS Faethon/CMS Faethon2 versions
    cpe:2.3:a:cms_faethon:cms_faethon:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cms_faethon:cms_faethon:*:*:*:*:*:*:*:*range: <=2.0_ultimate
    • (no CPE)range: <=2.0 Ultimate

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.