{"api_version":"1","generated_at":"2026-07-23T03:11:39+00:00","cve":"CVE-2006-2158","urls":{"html":"https://cve.report/CVE-2006-2158","api":"https://cve.report/api/cve/CVE-2006-2158.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-2158","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-2158"},"summary":{"title":"CVE-2006-2158","description":"Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_globals is enabled, allows remote attackers to modify arbitrary program variables via parameters, which are evaluated as PHP variable variables, as demonstrated by performing PHP remote file inclusion using the include_files array parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-05-03 10:02:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.4","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26252","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26252","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/19957","name":"http://secunia.com/advisories/19957","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"About Secunia Research | Flexera","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/1660","name":"http://www.vupen.com/english/advisories/2006/1660","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://retrogod.altervista.org/gbs_17_xpl_pl.html","name":"http://retrogod.altervista.org/gbs_17_xpl_pl.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Error 404 :(","mime":"text/plain","httpstatus":"404","archivestatus":"200"},{"url":"http://www.stadtaus.com/forum/t-2600.html","name":"http://www.stadtaus.com/forum/t-2600.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support Forum • View topic - Security Update - Version 1.9 released","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/17845","name":"http://www.securityfocus.com/bid/17845","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Stadtaus Guestbook Index.PHP Remote File Include Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2158","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2158","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"2158","vulnerable":"1","versionEndIncluding":"1.7","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"stadtaus","cpe5":"guestbook_script","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2006","cve_id":"2158","cve":"CVE-2006-2158","epss":"0.005960000","percentile":"0.693930000","score_date":"2026-04-20","updated_at":"2026-04-21 00:07:48"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T17:43:27.402Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"19957","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/19957"},{"name":"17845","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/17845"},{"name":"guestbook-includefiles-file-include(26252)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26252"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://retrogod.altervista.org/gbs_17_xpl_pl.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.stadtaus.com/forum/t-2600.html"},{"name":"ADV-2006-1660","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/1660"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-03-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_globals is enabled, allows remote attackers to modify arbitrary program variables via parameters, which are evaluated as PHP variable variables, as demonstrated by performing PHP remote file inclusion using the include_files array parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-19T15:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"19957","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/19957"},{"name":"17845","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/17845"},{"name":"guestbook-includefiles-file-include(26252)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26252"},{"tags":["x_refsource_MISC"],"url":"http://retrogod.altervista.org/gbs_17_xpl_pl.html"},{"tags":["x_refsource_MISC"],"url":"http://www.stadtaus.com/forum/t-2600.html"},{"name":"ADV-2006-1660","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/1660"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-2158","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_globals is enabled, allows remote attackers to modify arbitrary program variables via parameters, which are evaluated as PHP variable variables, as demonstrated by performing PHP remote file inclusion using the include_files array parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"19957","refsource":"SECUNIA","url":"http://secunia.com/advisories/19957"},{"name":"17845","refsource":"BID","url":"http://www.securityfocus.com/bid/17845"},{"name":"guestbook-includefiles-file-include(26252)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26252"},{"name":"http://retrogod.altervista.org/gbs_17_xpl_pl.html","refsource":"MISC","url":"http://retrogod.altervista.org/gbs_17_xpl_pl.html"},{"name":"http://www.stadtaus.com/forum/t-2600.html","refsource":"MISC","url":"http://www.stadtaus.com/forum/t-2600.html"},{"name":"ADV-2006-1660","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/1660"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-2158","datePublished":"2006-05-03T10:00:00.000Z","dateReserved":"2006-05-03T00:00:00.000Z","dateUpdated":"2024-08-07T17:43:27.402Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-05-03 10:02:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stadtaus:guestbook_script:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"6BF5EFB5-0EA2-4BAC-A4FB-5F794C3FC902"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"2158","Ordinal":"1","Title":"CVE-2006-2158","CVE":"CVE-2006-2158","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"2158","Ordinal":"1","NoteData":"Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_globals is enabled, allows remote attackers to modify arbitrary program variables via parameters, which are evaluated as PHP variable variables, as demonstrated by performing PHP remote file inclusion using the include_files array parameter.","Type":"Description","Title":"CVE-2006-2158"},{"CveYear":"2006","CveId":"2158","Ordinal":"2","NoteData":"2006-05-03","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"2158","Ordinal":"3","NoteData":"2017-07-19","Type":"Other","Title":"Modified"}]}}}