CVE-2006-0755

** DISPUTED ** Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier,...

5.1 MediumPublic exploitDisputed

CVE-2006-0755 is a medium vulnerability (CVSS 5.1) in Dotproject, published February 18, 2006. Its validity is disputed. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.03%, the 94th percentile.

Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary commands via the baseDir parameter in (1) db_adodb.php, (2) db_connect.php, (3) session.php, (4) vw_usr_roles.php, (5) calendar.php, (6) date_format.php, and (7) tasks/gantt.php; and the dPconfig[root_dir] parameter in (8) projects/gantt.php, (9) gantt2.php, and (10) vw_files.php. NOTE: the vendor disputes this issue, stating that the product documentation clearly recommends that the system administrator disable register_globals, and that the check.php script warns against this setting. Also, the vendor says that the protection.php/siteurl vector is incorrect because protection.php does not exist in the product

Exploit likelihood

8.03%Down 4.5 points since Feb 4, 2022

What each source reports

CVE List 5.6

Record: CVE-2006-0755
CVSS 3.1: 5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

EUVDEUVD-2006-0761 5.6

Record: EUVD-2006-0761
CVSS 3.1: 5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7x4q-26xj-gjr7 5.6

** DISPUTED ** Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier,...

** DISPUTED ** Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary commands via the baseDir parameter in (1) db_adodb.php, (2) db_connect.php, (3) session.php, (4) vw_usr_roles.php, (5) calendar.php, (6) date_format.php, and (7) tasks/gantt.php; and the dPconfig[root_dir] parameter in (8) projects/gantt.php, (9) gantt2.php, and (10) vw_files.php. NOTE: the vendor disputes this issue, stating that the product documentation clearly recommends that the system administrator disable register_globals, and that the check.php script warns against this setting. Also, the vendor says that the protection.php/siteurl vector is incorrect because protection.php does not exist in the product.

Record: GHSA-7x4q-26xj-gjr7
CVSS 3.1: 5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

NVD 5.6

Record: CVE-2006-0755
CVSS 3.1: 5.6 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0: 5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

Affected products

dotproject

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	dotProject 2.1.6 - Remote File Inclusion	2012-11-14
Exploit-DB	dotProject 2.0 - '/modules/projects/gantt.php?dPconfig[root_dir]' Remote File Inclusion	2006-02-14
Exploit-DB	dotProject 2.0 - '/includes/db_connect.php?baseDir' Remote File Inclusion	2006-02-14
Exploit-DB	dotProject 2.0 - '/includes/session.php?baseDir' Remote File Inclusion	2006-02-14
Exploit-DB	dotProject 2.0 - '/modules/projects/gantt2.php?dPconfig[root_dir]' Remote File Inclusion	2006-02-14
Exploit-DB	dotProject 2.0 - '/modules/projects/vw_files.php?dPconfig[root_dir]' Remote File Inclusion	2006-02-14
Exploit-DB	dotProject 2.0 - '/modules/admin/vw_usr_roles.php?baseDir' Remote File Inclusion	2006-02-14
Exploit-DB	dotProject 2.0 - '/modules/public/calendar.php?baseDir' Remote File Inclusion	2006-02-14
Exploit-DB	dotProject 2.0 - '/modules/public/date_format.php?baseDir' Remote File Inclusion	2006-02-14
Exploit-DB	dotProject 2.0 - '/modules/tasks/gantt.php?baseDir' Remote File Inclusion	2006-02-14

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References

Show 13 moreShow less