← Database

CVE-2006-6086

MEDIUM CVSS: 5.1 Published: 2006-11-24 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_pear_path parameter.

Affected Platforms

E-Ark E-Ark

Weakness Type

CWE-94

References