CVE-2006-0722
settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled,...
settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.
Exploit likelihood
What each source reports
NVD Score used
settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.
- Record
CVE-2006-0722- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.
- Record
CVE-2006-0722- Updated
- 2026-11-02
EUVDEUVD-2006-0729 No score
settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.
- Record
EUVD-2006-0729- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-crp2-mq2g-2grg No score
settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled,...
settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized.
- Record
GHSA-crp2-mq2g-2grg- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0722 is a low vulnerability (CVSS 2.6) in Reamday Enterprises Magic Downloads, published February 16, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.49%, the 74th percentile. No source names a fixed version.
References
evuln.com/vulns/73/summary.html
securityreason.com/securityalert/468
securityfocus.com/archive/1/425601/30/6830/threaded
vupen.com/english/advisories/2006/0602
secunia.com/advisories/18877
exchange.xforce.ibmcloud.com/vulnerabilities/24615
nvd.nist.gov/vuln/detail/CVE-2006-0722
github.com/advisories/GHSA-crp2-mq2g-2grg