CVE-2006-5786
Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers...
Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PHP code in arbitrary files via ".." sequences in the e107language_e107cookie cookie to gsitemap.php.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PHP code in arbitrary files via ".." sequences in the e107language_e107cookie cookie to gsitemap.php.
- Record
CVE-2006-5786- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PHP code in arbitrary files via ".." sequences in the e107language_e107cookie cookie to gsitemap.php.
- Record
CVE-2006-5786- Updated
- 2026-11-02
EUVDEUVD-2006-5770 No score
Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PHP code in arbitrary files via ".." sequences in the e107language_e107cookie cookie to gsitemap.php.
- Record
EUVD-2006-5770- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pvv5-4rm5-wxp5 No score
Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers...
Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PHP code in arbitrary files via ".." sequences in the e107language_e107cookie cookie to gsitemap.php.
- Record
GHSA-pvv5-4rm5-wxp5- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | e107 < 0.75 - 'e107language_e107cookie' Local File Inclusion | 2006-11-04 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5786 is a high vulnerability (CVSS 7.5) in E107, published November 7, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. No source names a fixed version.