CVE-2006-5624

HIGH 7.5CVE-2006-5624 · Published 31/10/2006 · updated 16/06/2026

In short

CVE-2006-5624 is a HIGH (CVSS 7.5) vulnerability affecting mpcs (mpcs).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mpcs mpcs	`= 0.5.0≤ 1.0.0`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System (MPCS) 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) include.php or (2) functions.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

References

secunia.com/advisories/22578 · Vendor Advisory
tpvgames.co.uk/web/mpcs · Patch
securityfocus.com/bid/20751 · Exploit
vupen.com/english/advisories/2006/4212
exchange.xforce.ibmcloud.com/vulnerabilities/29823

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free