{"api_version":"1","generated_at":"2026-07-03T12:39:55+00:00","cve":"CVE-2006-2811","urls":{"html":"https://cve.report/CVE-2006-2811","api":"https://cve.report/api/cve/CVE-2006-2811.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-2811","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-2811"},"summary":{"title":"CVE-2006-2811","description":"Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the babInstallPath parameter in (1) index.php, (2) topman.php, (3) approb.php, (4) vacadmb.php, (5) vacadma.php, (6) vacadm.php, (7) statart.php, (8) search.php, (9) posts.php, (10) options.php, (11) login.php, (12) frchart.php, (13) flbchart.php, (14) fileman.php, (15) faq.php, (16) event.php, (17) directory.php, (18) articles.php, (19) artedit.php, (20) calday.php, and additional unspecified PHP scripts.  NOTE: the utilit.php vector is already covered by CVE-2005-1964.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-06-05 17:02:00","updated_at":"2018-10-18 16:43:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://www.osvdb.org/27220","name":"27220","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26981","name":"ovidentia-multiple-scripts-file-include(26981)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/27212","name":"27212","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27227","name":"27227","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27215","name":"27215","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/435590/100/0/threaded","name":"20060531 multiple file inclusion exploits in ovidentia v5.8.0","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/27229","name":"27229","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27219","name":"27219","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27222","name":"27222","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27225","name":"27225","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27217","name":"27217","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27228","name":"27228","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/1033","name":"1033","refsource":"SREASON","tags":[],"title":"multiple file inclusion exploits in ovidentia v5.8.0 - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/27209","name":"27209","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27226","name":"27226","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27214","name":"27214","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27221","name":"27221","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/456893/100/200/threaded","name":"20070114 Ovidentia 5.6x Series Remote File İnclude","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/27213","name":"27213","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27224","name":"27224","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27216","name":"27216","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/18232","name":"18232","refsource":"BID","tags":[],"title":"Ovidentia Multiple Remote File Include Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/27223","name":"27223","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27211","name":"27211","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/27218","name":"27218","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/459572/100/0/threaded","name":"20070209 Ovidentia Exploit Codeds","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2811","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2811","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"2811","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cantico","cpe5":"ovidentia","cpe6":"5.8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2811","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cantico","cpe5":"ovidentia","cpe6":"5.8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-2811","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the babInstallPath parameter in (1) index.php, (2) topman.php, (3) approb.php, (4) vacadmb.php, (5) vacadma.php, (6) vacadm.php, (7) statart.php, (8) search.php, (9) posts.php, (10) options.php, (11) login.php, (12) frchart.php, (13) flbchart.php, (14) fileman.php, (15) faq.php, (16) event.php, (17) directory.php, (18) articles.php, (19) artedit.php, (20) calday.php, and additional unspecified PHP scripts.  NOTE: the utilit.php vector is already covered by CVE-2005-1964."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"27223","refsource":"OSVDB","url":"http://www.osvdb.org/27223"},{"name":"ovidentia-multiple-scripts-file-include(26981)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26981"},{"name":"27228","refsource":"OSVDB","url":"http://www.osvdb.org/27228"},{"name":"27215","refsource":"OSVDB","url":"http://www.osvdb.org/27215"},{"name":"27224","refsource":"OSVDB","url":"http://www.osvdb.org/27224"},{"name":"27214","refsource":"OSVDB","url":"http://www.osvdb.org/27214"},{"name":"1033","refsource":"SREASON","url":"http://securityreason.com/securityalert/1033"},{"name":"27216","refsource":"OSVDB","url":"http://www.osvdb.org/27216"},{"name":"27212","refsource":"OSVDB","url":"http://www.osvdb.org/27212"},{"name":"27222","refsource":"OSVDB","url":"http://www.osvdb.org/27222"},{"name":"27221","refsource":"OSVDB","url":"http://www.osvdb.org/27221"},{"name":"27226","refsource":"OSVDB","url":"http://www.osvdb.org/27226"},{"name":"27220","refsource":"OSVDB","url":"http://www.osvdb.org/27220"},{"name":"27225","refsource":"OSVDB","url":"http://www.osvdb.org/27225"},{"name":"27211","refsource":"OSVDB","url":"http://www.osvdb.org/27211"},{"name":"27229","refsource":"OSVDB","url":"http://www.osvdb.org/27229"},{"name":"18232","refsource":"BID","url":"http://www.securityfocus.com/bid/18232"},{"name":"20070114 Ovidentia 5.6x Series Remote File İnclude","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/456893/100/200/threaded"},{"name":"27209","refsource":"OSVDB","url":"http://www.osvdb.org/27209"},{"name":"27218","refsource":"OSVDB","url":"http://www.osvdb.org/27218"},{"name":"27217","refsource":"OSVDB","url":"http://www.osvdb.org/27217"},{"name":"27227","refsource":"OSVDB","url":"http://www.osvdb.org/27227"},{"name":"27213","refsource":"OSVDB","url":"http://www.osvdb.org/27213"},{"name":"20060531 multiple file inclusion exploits in ovidentia v5.8.0","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/435590/100/0/threaded"},{"name":"27219","refsource":"OSVDB","url":"http://www.osvdb.org/27219"},{"name":"20070209 Ovidentia Exploit Codeds","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/459572/100/0/threaded"}]}},"nvd":{"publishedDate":"2006-06-05 17:02:00","lastModifiedDate":"2018-10-18 16:43:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:cantico:ovidentia:5.8.0:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"2811","Ordinal":"18131","Title":"CVE-2006-2811","CVE":"CVE-2006-2811","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"2811","Ordinal":"1","NoteData":"Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the babInstallPath parameter in (1) index.php, (2) topman.php, (3) approb.php, (4) vacadmb.php, (5) vacadma.php, (6) vacadm.php, (7) statart.php, (8) search.php, (9) posts.php, (10) options.php, (11) login.php, (12) frchart.php, (13) flbchart.php, (14) fileman.php, (15) faq.php, (16) event.php, (17) directory.php, (18) articles.php, (19) artedit.php, (20) calday.php, and additional unspecified PHP scripts.  NOTE: the utilit.php vector is already covered by CVE-2005-1964.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"2811","Ordinal":"2","NoteData":"2006-06-05","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"2811","Ordinal":"3","NoteData":"2018-10-18","Type":"Other","Title":"Modified"}]}}}