CVE-2006-6592: php bloq
Vulnerability summary
CVE-2006-6592 is a high (CVSS 7.5) vulnerability in php bloq. EPSS estimates a 2.67% chance of exploitation in the next 30 days, higher than 85.5% of scored vulnerabilities. 6 public exploits are recorded.
Timeline
- 15-12-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code via a URL in the page[path] parameter to (1) index.php, (2) admin.php, (3) rss.php, (4) rdf.php, (5) rss2.php, or (6) files/mainfile.php.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.67%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
0.00 pp
From 2.67% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
6 foundBloq 0.5.4 - '/files/mainfile.php?page[path]' Remote File Inclusion
Maturity: poc
Bloq 0.5.4 - 'admin.php?page[path]' Remote File Inclusion
Maturity: poc
Bloq 0.5.4 - 'index.php?page[path]' Remote File Inclusion
Maturity: poc
Show all 6 exploits
Bloq 0.5.4 - 'rdf.php?page[path]' Remote File Inclusion
Maturity: poc
Bloq 0.5.4 - 'rss.php?page[path]' Remote File Inclusion
Maturity: poc
Bloq 0.5.4 - 'rss2.php?page[path]' Remote File Inclusion
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Php1 product
- bloq0.5.4
1 vendor · 1 product