cbcvebase.
CVE-2006-1890
published 2006-04-20

CVE-2006-1890: Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myevent_path…

PriorityP337high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
4.32%
90.0th percentile
Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter in (1) event.php and (2) initialize.php. NOTE: vector 2 was later reported to affect 1.4 as well.

Affected

2 ranges
VendorProductVersion rangeFixed in
myweblandmyevent——
myweblandmyevent——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.