CVE-2006-2315

🗓️ 12 May 2006 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

PHP remote file inclusion vulnerability in ISPConfig 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a UR

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2006-2315	12 May 200600:00	–	cvelist
Exploit DB	ISPConfig 2.2.2/2.2.3 - 'Session.INC.php' Remote File Inclusion	9 May 200600:00	–	exploitdb
NVD	CVE-2006-2315	12 May 200600:02	–	nvd
Prion	Remote file inclusion	12 May 200600:02	–	prion
Positive Technologies	PT-2006-3280 · Ispconfig · Ispconfig	12 May 200600:00	–	ptsecurity

NVD

Node

Source	Link
lists	www.lists.grok.org.uk/pipermail/full-disclosure/2006-May/045855.html
exploit-db	www.exploit-db.com/exploits/1762
secunia	www.secunia.com/advisories/19994
xorcrew	www.xorcrew.net/xpa/XPA-ISPConfig.txt
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/26299
vupen	www.vupen.com/english/advisories/2006/1727
securityfocus	www.securityfocus.com/archive/1/437456/100/200/threaded
howtoforge	www.howtoforge.com/forums/showthread.php
securityfocus	www.securityfocus.com/bid/17909
osvdb	www.osvdb.org/25355

Parameter	Position	Path	Description	CWE
go_info[server][classes_root]	query param	lib/session.inc.php	Remote PHP code inclusion via unsanitized user input in go_info[server][classes_root] parameter.	CWE-94

16 Jun 2026 22:24Current

7.6High risk

Vulners AI Score7.6

CVSS 27.5

EPSS0.04828