CVE-2006-3040
** DISPUTED ** PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows...
PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows remote attackers to execute arbitrary PHP code via a URL in the direct parameter. NOTE: this issue has been disputed by CVE, since the $direct variable is set to a static value just before the include statement
Exploit likelihood
What each source reports
NVD Score used
PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows remote attackers to execute arbitrary PHP code via a URL in the direct parameter. NOTE: this issue has been disputed by CVE, since the $direct variable is set to a static value just before the include statement
- Record
CVE-2006-3040- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows remote attackers to execute arbitrary PHP code via a URL in the direct parameter. NOTE: this issue has been disputed by CVE, since the $direct variable is set to a static value just before the include statement
- Record
CVE-2006-3040- Updated
- 2026-11-02
EUVDEUVD-2006-3037 No score
PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows remote attackers to execute arbitrary PHP code via a URL in the direct parameter. NOTE: this issue has been disputed by CVE, since the $direct variable is set to a static value just before the include statement
- Record
EUVD-2006-3037- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rc3c-4c69-rjx6 No score
** DISPUTED ** PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows...
** DISPUTED ** PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows remote attackers to execute arbitrary PHP code via a URL in the direct parameter. NOTE: this issue has been disputed by CVE, since the $direct variable is set to a static value just before the include statement.
- Record
GHSA-rc3c-4c69-rjx6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3040 is a high vulnerability (CVSS 7.5) in Amr Talkbox Talkbox, published June 15, 2006. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 1.67%, the 76th percentile.