Back
CVE-2006-5101
PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in (1) Comdev Contact Form…
- 7.5HighCVSS base score
- 6.3%Exploitation in 30 daysEPSS · top 6.3% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in (1) Comdev Contact Form 3.1, (2) Comdev Customer Helpdesk 3.1, (3) Comdev Events Calendar 3.1, (4) Comdev FAQ Support 3.1, (5) Comdev Guestbook 3.1, (6) Comdev Links Directory 3.1, (7) Comdev News Publisher 3.1, (8) Comdev Newsletter 3.1, (9) Comdev Photo Gallery 3.1, (10) Comdev Vote Caster 3.1, (11) Comdev Web Blogger 3.1, and (12) Comdev eCommerce 3.1, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: it has been reported that 4.1 versions might also be affected.
Timeline
ID reserved
By mitre
Published
- 18 years later
· 18 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | High7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 6.3% · top 6.3% of all CVEs (11 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Affected products
n/a
- affected n/a
References
References53
- ADV-2006-3807 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- ADV-2006-3811 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 29300 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 29310 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 20060927 Comdev News Publisher 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 22147 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 22157 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 20060927 Comdev Contact Form 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20060927 Comdev eCommerce 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 29303 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- ADV-2006-3806 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 22153 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 22169 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- ADV-2006-3809 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- ADV-2006-3813 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 1658 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
- 29305 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 20060927 Comdev Newsletter 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 29311 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 22170 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 20060927 Comdev Photo Gallery 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 29307 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 20060927 Comdev Events Calendar 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 22168 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 20060927 Comdev Guestbook 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 29304 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 22149 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- ADV-2006-3808 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 20060927 Comdev Vote Caster 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- ADV-2006-3804 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 22135 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 29306 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 22154 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 22134 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- ADV-2006-3812 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 20060927 Comdev FAQ Support 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- ADV-2006-3810 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 29308 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 22133 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 29302 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 20060927 Comdev Customer Helpdesk 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- ADV-2006-3805 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- comdev-include-file-include(29220) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 29301 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- ADV-2006-3803 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 29299 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 20060927 Comdev Links Directory 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20060927 Comdev Web Blogger 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 22151 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- ADV-2006-3814 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 20060927 Comdev CSV Importer 3.1 :) <= Remote File Inclusion (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 29309 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- ADV-2006-3815 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2006-5086 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2006-5101)Record last updated .