CVE-2006-3689

** DISPUTED ** PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia...

7.5 HighPublic exploitDisputed

PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this issue has been disputed by a third party that claims that " the myadmindir variable is set before any GET variables are processed.

Exploit likelihood

3.63%Down 3.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2006-3689
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-3689
Updated: 2026-11-02

EUVDEUVD-2006-3684 No score

Record: EUVD-2006-3684
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3mv9-9jrg-48mh No score

** DISPUTED ** PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia...

** DISPUTED ** PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this issue has been disputed by a third party that claims that " the myadmindir variable is set before any GET variables are processed."

Record: GHSA-3mv9-9jrg-48mh
Updated: 2026-11-02

Affected products

codeworks gnomedia subberz

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Subberz Lite - UserFunc Remote File Inclusion	2006-07-14

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-3689 is a high vulnerability (CVSS 7.5) in Codeworks Gnomedia Subberz, published July 18, 2006. Its validity is disputed. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.63%, the 89th percentile.