CVE-2006-2825
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-2825
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
cPanel does not automatically synchronize the PHP open_basedir configuration directive between the main server and virtual hosts that share physical directories, which might allow a local user to bypass open_basedir restrictions and access other virtual hosts via a PHP script that uses a main server URL (such as ~username) that is blocked by the user's own open_basedir directive, but not the main server's open_basedir directive.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
cPanel PHP open_basedir配置指令 权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
cPanel未在共享物理目录的主服务器和虚拟主机之间自动同步PHP open_basedir配置指令，本地用户可以通过一个使用主服务器URL(如~用户名)的PHP脚本(这种URL可被用户自身的open_basedir指令阻止，但不被主服务器open_basedir指令阻止)来绕过open_basedir限制并访问其他虚拟主机。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-2825
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-2825
请登录查看更多情报信息。
Same Patch Batch · n/a · 2006-06-05 · 26 CVEs total
| CVE-2006-2814 | iShopCart 多个远程安全漏洞 | |
| CVE-2006-2827 | X-Cart Gold/Pro/X-Cart search.php SQL注入漏洞 | |
| CVE-2006-2826 | phpRPC库 rpc_decoder.php文件 输入验证漏洞 | |
| CVE-2006-2824 | Logicalware MailManager 数据流"0xc8 0x27" 权限许可和访问控制漏洞 | |
| CVE-2006-2823 | Katrien De Graeve a.shopKart web根目录 信息泄露漏洞 | |
| CVE-2006-2822 | Dusan Drobac CodeAvalanche FreeForum (CAForum) admin/default.asp SQL注入漏洞 | |
| CVE-2006-2821 | DeltaScripts PHP Pro Publish多个跨站脚本攻击漏洞 | |
| CVE-2006-2820 | HotWebScripts.com Weblog Oggi 跨站脚本攻击(XSS)漏洞 | |
| CVE-2006-2819 | Barnraiser Igloo Wiki.php 在PHP远程文件包含漏洞 | |
| CVE-2006-2818 | Cameron McKay Informium common-menu.php PHP远程文件包含漏洞 | |
| CVE-2006-2817 | Tekno.Portal Bolum.PHP SQL注入漏洞 | |
| CVE-2006-2816 | CoolPHP Index.PHP 跨站脚本攻击漏洞 | |
| CVE-2006-2815 | Two Shoes M-Factory (TSMF) SimpleBoard Stable 多个跨站脚本攻击(XSS)漏洞 | |
| CVE-2006-2828 | PHP-Nuke 多个全局变量重写漏洞 | |
| CVE-2006-2813 | IShopCart Easy-Scart.CGI 目录遍历漏洞 | |
| CVE-2006-2812 | Dominios Europa PICRATE index.php 多个跨站脚本攻击(XSS)漏洞 | |
| CVE-2006-2811 | Ovidentia 多个输入验证漏洞 | |
| CVE-2006-2810 | Belchior Foundry vCard 多个跨站脚本攻击(XSS) 漏洞 | |
| CVE-2006-2809 | ar-blog index.php 多个跨站脚本攻击(XSS)漏洞 | |
| CVE-2006-2808 | Lycos Tripod htmlGEAR guestGEAR 跨站脚本攻击(XSS)漏洞 |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2006-2825
No comments yet