CVEvulnerability

CVE-2006-5062

7.5 HIGH Published 2006-09-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-09-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows remote attackers to execute arbitrary PHP code via a URL in the temppath parameter.

Affected configurations

• pblang pblang (<= 4.66z) • pblang pblang 4.0 • pblang pblang 4.6 • pblang pblang 4.56 4.5 rc2 • pblang pblang 4.63 • pblang pblang 4.65 • pblang pblang 4.66

References