CVE-2006-5101

HOCH 7.5CVE-2006-5101 · Published 03/10/2006 · updated 16/06/2026

Kurz gesagt

CVE-2006-5101 ist eine Schwachstelle (HOCH (CVSS 7.5)) in comdev csv importer (comdev).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.3%, höher als bei 93.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
comdev csv importer comdev	`= 3.1= 4.1`	No fix yet

Description

PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in (1) Comdev Contact Form 3.1, (2) Comdev Customer Helpdesk 3.1, (3) Comdev Events Calendar 3.1, (4) Comdev FAQ Support 3.1, (5) Comdev Guestbook 3.1, (6) Comdev Links Directory 3.1, (7) Comdev News Publisher 3.1, (8) Comdev Newsletter 3.1, (9) Comdev Photo Gallery 3.1, (10) Comdev Vote Caster 3.1, (11) Comdev Web Blogger 3.1, and (12) Comdev eCommerce 3.1, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: it has been reported that 4.1 versions might also be affected.

References

secunia.com/advisories/22133 · Vendor Advisory
secunia.com/advisories/22134 · Vendor Advisory
secunia.com/advisories/22135 · Vendor Advisory
secunia.com/advisories/22147 · Vendor Advisory
secunia.com/advisories/22149 · Vendor Advisory
secunia.com/advisories/22151 · Vendor Advisory
secunia.com/advisories/22153 · Vendor Advisory
secunia.com/advisories/22154 · Vendor Advisory
secunia.com/advisories/22157 · Vendor Advisory
secunia.com/advisories/22168 · Vendor Advisory
secunia.com/advisories/22169 · Vendor Advisory
secunia.com/advisories/22170 · Vendor Advisory
securityreason.com/securityalert/1658
osvdb.org/29299
osvdb.org/29300

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

comdev csv importer

comdev

= 3.1= 4.1

No fix yet

Description