VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 6, 2006· Updated Jun 16, 2026

CVE-2006-5730

CVE-2006-5730

Description

PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. NOTE: it is possible that this is a vulnerability in FCKeditor.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Modxcms/Modxcms2 versions
    cpe:2.3:a:modxcms:modxcms:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:modxcms:modxcms:*:*:*:*:*:*:*:*range: <=0.9.2.1
    • cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*
  • Modx/MODXllm-fuzzy
    Range: <=0.9.2.1

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.