CVE-2006-2859

PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mybloggie_root_path parameter to (1) admin.php or (2) scode.php. NOTE: this issue has been disputed in multiple third party followups, which say that the MyBloggie source code does not demonstrate the issue, so it might be the result of another module. CVE analysis as of 20060605 agrees with the dispute. In addition, scode.php is not part of the MyBloggie distribution

• http://securityreason.com/securityalert/1049
• http://www.securityfocus.com/archive/1/435789/100/0/threaded
• http://www.securityfocus.com/archive/1/435866/100/0/threaded
• http://www.securityfocus.com/archive/1/436124/100/0/threaded
• http://www.securityfocus.com/bid/18241Exploit
• http://securityreason.com/securityalert/1049
• http://www.securityfocus.com/archive/1/435789/100/0/threaded
• http://www.securityfocus.com/archive/1/435866/100/0/threaded
• http://www.securityfocus.com/archive/1/436124/100/0/threaded
• http://www.securityfocus.com/bid/18241Exploit

Published

Jun 6, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2853SQL injection vulnerability in content.php in abarcar Realty…
• CVE-2006-2854SQL injection vulnerability in index.php in iBWd Guestbook 1…
• CVE-2006-2855SQL injection vulnerability in index.php in xueBook 1.0 allo…
• CVE-2006-2856ActiveState ActivePerl 5.8.8.817 for Windows configures the …
• CVE-2006-2857SQL injection vulnerability in index.php in LifeType 1.0.4 a…
• CVE-2006-2858SQL injection vulnerability in viewmsg.asp in LocazoList Cla…
• CVE-2006-2860PHP remote file inclusion vulnerability in Webspotblogging 3…
• CVE-2006-2861SQL injection vulnerability in index.php in Particle Wiki 1.…
• CVE-2006-2862SQL injection vulnerability in viewimage.php in Particle Gal…
• CVE-2006-2863PHP remote file inclusion vulnerability in class.cs_phpmaile…
• CVE-2006-2864Multiple PHP remote file inclusion vulnerabilities in BlueSh…
• CVE-2006-2865PHP remote file inclusion vulnerability in template.php in p…