CVE-2006-5101

Published: Oct 3, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in (1) Comdev Contact Form 3.1, (2) Comdev Customer Helpdesk 3.1, (3) Comdev Events Calendar 3.1, (4) Comdev FAQ Support 3.1, (5) Comdev Guestbook 3.1, (6) Comdev Links Directory 3.1, (7) Comdev News Publisher 3.1, (8) Comdev Newsletter 3.1, (9) Comdev Photo Gallery 3.1, (10) Comdev Vote Caster 3.1, (11) Comdev Web Blogger 3.1, and (12) Comdev eCommerce 3.1, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: it has been reported that 4.1 versions might also be affected.

Affected (2)

Products: Comdev: Comdev Csv Importer

Comdev

1 product

Comdev Csv Importer

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Comdev Comdev Csv Importer	Version 3.1
Comdev Comdev Csv Importer	Version 4.1

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (106)

http://secunia.com/advisories/22133

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22134

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22135

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22147

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22149

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22151

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22153

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22154

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22157

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22168

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22169

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22170

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1658

Source: cve@mitre.org

http://www.osvdb.org/29299

Source: cve@mitre.org

http://www.osvdb.org/29300

Source: cve@mitre.org

http://www.osvdb.org/29301

Source: cve@mitre.org

http://www.osvdb.org/29302

Source: cve@mitre.org

http://www.osvdb.org/29303

Source: cve@mitre.org

http://www.osvdb.org/29304

Source: cve@mitre.org

http://www.osvdb.org/29305

Source: cve@mitre.org

http://www.osvdb.org/29306

Source: cve@mitre.org

http://www.osvdb.org/29307

Source: cve@mitre.org

http://www.osvdb.org/29308

Source: cve@mitre.org

http://www.osvdb.org/29309

Source: cve@mitre.org

http://www.osvdb.org/29310

Source: cve@mitre.org

http://www.osvdb.org/29311

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447184/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447185/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447186/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447187/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447188/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447190/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447192/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447193/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447194/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447201/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447207/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447209/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/447213/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3803

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3804

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3805

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3806

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3807

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3808

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3809

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3810

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3811

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3812

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3813

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3814

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3815

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/29220

Source: cve@mitre.org

http://secunia.com/advisories/22133