← Database

CVE-2006-6417

HIGH CVSS: 7.5 Published: 2006-12-10 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows remote attackers to execute arbitrary PHP code via a URL in the inc_path parameter.

Affected Platforms

B2Evolution B2Evolution

Weakness Type

NVD-CWE-Other

References