VULNERABILITY INTELLIGENCE
CVE-2006-1563
CVSS score7.6 HIGH
EPSS probability1.59%
CISA KEVNot currently listed
Published2006-03-31
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C
Description
Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote administrators to execute arbitrary PHP code into the config file, which is included other [V]Book scripts.