CVE-2006-3116

Name: CVE-2006-3116
Creator: NVD / NIST
Published: 2006-06-29T21:05:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 7.13%

Last modified Jun 16, 2026

CVE-2006-3116 is a vulnerability of currently unknown severity. Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) configuration.php, (3) guilds.php, (4) index.php, (5) locations.php, (6) login.php, (7) lua_output.php, (8) permissions.php, (9) profile.php, (10) raids.php, (11) register.php, (12) roster.php, and (13) view.php.. EPSS estimates a 7.13% chance of exploitation in the next 30 days.

Description

Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) configuration.php, (3) guilds.php, (4) index.php, (5) locations.php, (6) login.php, (7) lua_output.php, (8) permissions.php, (9) profile.php, (10) raids.php, (11) register.php, (12) roster.php, and (13) view.php.

Metrics

EPSS Probability

7.13%

93.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Spiffyjr	Phpraid	3.0.4
Spiffyjr	Phpraid	3.0.5

References

Timeline

Published: Jun 29, 2006
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2006-3116?

How severe is CVE-2006-3116?

Severity scoring for CVE-2006-3116 is pending analysis. The EPSS model estimates a 7.13% probability of exploitation in the next 30 days.

How do I fix CVE-2006-3116?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2006-3116?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST