VULNERABILITY INTELLIGENCE

CVE-2006-0169

CVSS score7.5 HIGH
EPSS probability1.90%
CISA KEVNot currently listed
Published2006-01-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory.

Primary references