CVE-2006-5865

HIGH 7.5CVE-2006-5865 · Published 11/11/2006 · updated 16/06/2026

In short

CVE-2006-5865 is a HIGH (CVSS 7.5) vulnerability affecting myalbum (damien benier).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
myalbum damien_benier	`≤ 3.02`	No fix yet

Description

PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the langs_dir parameter.

References

secunia.com/advisories/22619 · Vendor Advisory
osvdb.org/30280
securityfocus.com/archive/1/452140
securityfocus.com/bid/21187
vupen.com/english/advisories/2006/4427 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/30169
exploit-db.com/exploits/2747

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free