Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-5911 Details

Description

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://code.campware.org/projects/campsite/changeset/6057	CVE	Patch
http://code.campware.org/projects/campsite/changeset/6058	CVE	Patch
http://code.campware.org/projects/campsite/query?milestone=2.6.2	CVE
http://code.campware.org/projects/campsite/ticket/2349	CVE
http://sourceforge.net/project/shownotes.php?release_id=459574&group_id=66936	CVE	Patch
http://www.osvdb.org/34187	CVE
http://www.osvdb.org/34188	CVE
http://www.osvdb.org/34189	CVE
http://www.osvdb.org/34190	CVE
http://www.osvdb.org/34191	CVE
http://www.osvdb.org/34192	CVE
http://www.osvdb.org/34193	CVE
http://www.osvdb.org/34194	CVE
http://www.osvdb.org/34195	CVE
http://www.osvdb.org/34196	CVE
http://www.osvdb.org/34197	CVE
http://www.osvdb.org/34198	CVE
http://www.osvdb.org/34199	CVE
http://www.osvdb.org/34200	CVE
http://www.osvdb.org/34201	CVE
http://www.osvdb.org/34202	CVE
http://www.osvdb.org/34203	CVE
http://www.osvdb.org/34204	CVE
http://www.osvdb.org/34205	CVE
http://www.osvdb.org/34206	CVE
http://www.osvdb.org/34207	CVE
http://www.osvdb.org/34208	CVE
http://www.osvdb.org/34209	CVE
http://www.osvdb.org/34210	CVE
http://www.osvdb.org/34211	CVE
http://www.osvdb.org/34212	CVE
http://www.osvdb.org/34213	CVE
http://www.osvdb.org/34214	CVE
http://www.osvdb.org/34215	CVE
http://www.osvdb.org/34216	CVE
http://www.osvdb.org/34217	CVE
http://www.osvdb.org/34218	CVE
http://www.osvdb.org/34219	CVE
http://www.osvdb.org/34220	CVE
http://www.osvdb.org/34221	CVE
http://www.osvdb.org/34222	CVE
http://www.osvdb.org/34223	CVE
http://www.osvdb.org/34224	CVE
http://www.osvdb.org/34225	CVE
http://www.securityfocus.com/bid/23874	CVE
http://code.campware.org/projects/campsite/changeset/6057	[email protected]	Patch
http://code.campware.org/projects/campsite/changeset/6058	[email protected]	Patch
http://code.campware.org/projects/campsite/query?milestone=2.6.2	[email protected]
http://code.campware.org/projects/campsite/ticket/2349	[email protected]
http://sourceforge.net/project/shownotes.php?release_id=459574&group_id=66936	[email protected]	Patch
http://www.osvdb.org/34187	[email protected]
http://www.osvdb.org/34188	[email protected]
http://www.osvdb.org/34189	[email protected]
http://www.osvdb.org/34190	[email protected]
http://www.osvdb.org/34191	[email protected]
http://www.osvdb.org/34192	[email protected]
http://www.osvdb.org/34193	[email protected]
http://www.osvdb.org/34194	[email protected]
http://www.osvdb.org/34195	[email protected]
http://www.osvdb.org/34196	[email protected]
http://www.osvdb.org/34197	[email protected]
http://www.osvdb.org/34198	[email protected]
http://www.osvdb.org/34199	[email protected]
http://www.osvdb.org/34200	[email protected]
http://www.osvdb.org/34201	[email protected]
http://www.osvdb.org/34202	[email protected]
http://www.osvdb.org/34203	[email protected]
http://www.osvdb.org/34204	[email protected]
http://www.osvdb.org/34205	[email protected]
http://www.osvdb.org/34206	[email protected]
http://www.osvdb.org/34207	[email protected]
http://www.osvdb.org/34208	[email protected]
http://www.osvdb.org/34209	[email protected]
http://www.osvdb.org/34210	[email protected]
http://www.osvdb.org/34211	[email protected]
http://www.osvdb.org/34212	[email protected]
http://www.osvdb.org/34213	[email protected]
http://www.osvdb.org/34214	[email protected]
http://www.osvdb.org/34215	[email protected]
http://www.osvdb.org/34216	[email protected]
http://www.osvdb.org/34217	[email protected]
http://www.osvdb.org/34218	[email protected]
http://www.osvdb.org/34219	[email protected]
http://www.osvdb.org/34220	[email protected]
http://www.osvdb.org/34221	[email protected]
http://www.osvdb.org/34222	[email protected]
http://www.osvdb.org/34223	[email protected]
http://www.osvdb.org/34224	[email protected]
http://www.osvdb.org/34225	[email protected]
http://www.securityfocus.com/bid/23874	[email protected]

see all 90 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
campware.org campsite	2.6.0 2.6.1
CPE cpe:2.3:a:campware.org:campsite:2.6.0:::::::* cpe:2.3:a:campware.org:campsite:2.6.1:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 15, 2006	Initial Analysis	[email protected]