{"id":"CVE-2006-5131","aliases":["EUVD-2006-5116","GHSA-g2gj-3pqc-cfwr"],"status":"published","title":"module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1...","description":"module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by \"\u003c?php\" and \"?\u003e\", possibly due to a static code injection vulnerability involving admin/data_inc.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02666,"percentile":0.85837,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-10-02T20:00:00Z","modified":"2026-06-16T22:30:33Z","products":[{"vendor":"salims_softhouse","product":"jaf_cms"}],"references":[{"url":"http://securityreason.com/securityalert/1674","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://secunia.com/advisories/22143","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/447081/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-5131"},{"url":"https://github.com/advisories/GHSA-g2gj-3pqc-cfwr"}],"sources":{"cve":[{"id":"CVE-2006-5131","description":"module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by \"\u003c?php\" and \"?\u003e\", possibly due to a static code injection vulnerability involving admin/data_inc.php.","status":"published","published":"2006-10-02T20:00:00Z","modified":"2024-08-07T19:41:04.173Z","updated_at":"2026-11-02T14:33:47.741012Z"}],"euvd":[{"id":"EUVD-2006-5116","description":"module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by \"\u003c?php\" and \"?\u003e\", possibly due to a static code injection vulnerability involving admin/data_inc.php.","status":"published","published":"2006-10-02T20:00:00Z","modified":"2024-08-07T19:41:04Z","updated_at":"2026-11-03T01:15:48.962734Z"}],"ghsa":[{"id":"GHSA-g2gj-3pqc-cfwr","title":"module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1...","description":"module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by \"\u003c?php\" and \"?\u003e\", possibly due to a static code injection vulnerability involving admin/data_inc.php.","status":"published","published":"2022-05-01T07:25:09Z","modified":"2023-01-31T05:02:04Z","updated_at":"2026-11-02T14:48:11.509294Z"}],"nvd":[{"id":"CVE-2006-5131","description":"module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by \"\u003c?php\" and \"?\u003e\", possibly due to a static code injection vulnerability involving admin/data_inc.php.","status":"published","published":"2006-10-03T04:03:00Z","modified":"2026-06-16T22:30:33.477Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:06.675668Z"}]}}