Every CVE Search/ Get API key

CVE-2006-6612

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers...

7.5 HighPublic exploit

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath_start parameter.

Exploit likelihood

2.68%Down 1.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath_start parameter.

Record
CVE-2006-6612
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath_start parameter.

Record
CVE-2006-6612
Updated
2026-11-02
EUVDEUVD-2006-6595 No score

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath_start parameter.

Record
EUVD-2006-6595
Updated
2026-11-03
GitHub AdvisoriesGHSA-fqgw-wp3j-f75g No score

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers...

PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the basepath_start parameter.

Record
GHSA-fqgw-wp3j-f75g
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHPMyCMS 0.3 - 'basic.inc.php' Remote File Inclusion2006-12-13

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-6612 is a high vulnerability (CVSS 7.5) in Phpmycms, published December 18, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.68%, the 85th percentile. No source names a fixed version.

References

MoveEnter Open