Description

PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows remote attackers to execute arbitrary PHP code via a URL in the inc_path parameter.

Remediation

References

CVE-2006-6417

Related Vulnerabilities

phpMyFAQ CVE-2026-24420 Vulnerability (CVE-2026-24420)

WordPress Plugin Inline Tweet Sharer-Twitter Sharing Cross-Site Scripting (2.5.3)

SharePoint Improper Input Validation Vulnerability (CVE-2019-1296)

Nexus Incorrect Authorization Vulnerability (CVE-2026-77125)

MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-41799)

Severity

High

Classification

CVE-2006-6417

Tags

Missing Update Known Vulnerabilities