VULNERABILITY INTELLIGENCE
CVE-2006-3317
CVSS score5.1 MEDIUM
EPSS probability17.09%
CISA KEVNot currently listed
Published2006-06-29
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Description
PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) announcements.php and (2) rss.php, a different set of vectors and affected versions than CVE-2006-3316 and CVE-2006-3116.
Primary references
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com — Vendor Advisory
- PSIRT-CNA@flexerasoftware.com — Vendor Advisory
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com