CVE-2006-3692

PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to execute arbitrary PHP code via a URL in the lm_path parameter. NOTE: the vendor has disputed this issue to SecurityTracker, stating that the $lm_path variable is set to a constant value. As of 20060726, CVE concurs with the vendor based on SecurityTracker's post-disclosure analysis

• http://securityreason.com/securityalert/1243
• http://securitytracker.com/id?1016530
• http://www.attrition.org/pipermail/vim/2006-July/000946.html
• http://www.osvdb.org/28289
• http://www.securityfocus.com/archive/1/440291/100/0/threaded
• http://www.securityfocus.com/bid/19014Exploit
• http://securityreason.com/securityalert/1243
• http://securitytracker.com/id?1016530
• http://www.attrition.org/pipermail/vim/2006-July/000946.html
• http://www.osvdb.org/28289
• http://www.securityfocus.com/archive/1/440291/100/0/threaded
• http://www.securityfocus.com/bid/19014Exploit

Published

Jul 21, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3686Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenV…
• CVE-2006-3687Stack-based buffer overflow in the Universal Plug and Play (…
• CVE-2006-3688SQL injection vulnerability in Room.php in Francisco Charrua…
• CVE-2006-3689PHP remote file inclusion vulnerability in user-func.php in …
• CVE-2006-3690Multiple PHP remote file inclusion vulnerabilities in MiniBB…
• CVE-2006-3691Multiple SQL injection vulnerabilities in VBZooM 1.11 and ea…
• CVE-2006-3693Rocks Clusters 4.1 and earlier allows local users to gain pr…
• CVE-2006-3694Multiple unspecified vulnerabilities in Ruby before 1.8.5 al…
• CVE-2006-3695Trac before 0.9.6 does not disable the "raw" or "include" co…
• CVE-2006-3696filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462…
• CVE-2006-3697Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in…
• CVE-2006-3698Multiple unspecified vulnerabilities in Oracle Database 10.1…