CVE-2006-6783
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via...
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information.
- Record
CVE-2006-6783- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information.
- Record
CVE-2006-6783- Updated
- 2026-11-02
EUVDEUVD-2006-6766 No score
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2006-6766- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x79m-w5p6-hc65 No score
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via...
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information.
- Record
GHSA-x79m-w5p6-hc65- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6783 is a high vulnerability (CVSS 7.5) in Logahead Unu, published December 28, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.96%, the 80th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/455307/100/0/threaded
vupen.com/english/advisories/2006/5184
securityreason.com/securityalert/2071
securitytracker.com/id?1017444
secunia.com/advisories/23470
logahead.com/forums/comments.php?DiscussionID=216
nvd.nist.gov/vuln/detail/CVE-2006-6783
github.com/advisories/GHSA-x79m-w5p6-hc65