CVE-2006-3116

Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote...

5.1 Medium

Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) configuration.php, (3) guilds.php, (4) index.php, (5) locations.php, (6) login.php, (7) lua_output.php, (8) permissions.php, (9) profile.php, (10) raids.php, (11) register.php, (12) roster.php, and (13) view.php.

Exploit likelihood

7.26%Down 5.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.1

Record: CVE-2006-3116
CVSS 2.0: 5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-3116
Updated: 2026-11-02

EUVDEUVD-2006-3113 No score

Record: EUVD-2006-3113
Updated: 2026-11-03

GitHub AdvisoriesGHSA-25qh-vf9g-cg5r No score

Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote...

Record: GHSA-25qh-vf9g-cg5r
Updated: 2026-11-02

Affected products

spiffyjr phpraid

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-3116 is a medium vulnerability (CVSS 5.1) in Spiffyjr Phpraid, published June 29, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.26%, the 94th percentile. No source names a fixed version.

References

Show 13 moreShow less