CVE-2006-3995

Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, and (7) uninstall.uhp.php, in the UHP (User Home Pages) 0.5 component (aka com_uhp) for Mambo or Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

• CWE-94

• http://attrition.org/pipermail/vim/2007-March/001457.html
• http://attrition.org/pipermail/vim/2007-March/001458.html
• http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.html
• http://secunia.com/advisories/21305Patch, Vendor Advisory
• http://www.osvdb.org/27651Exploit, Patch
• http://www.osvdb.org/27652
• http://www.osvdb.org/28111
• http://www.osvdb.org/28112
• http://www.osvdb.org/28113
• http://www.ravenswoodit.co.uk/index.php?option=com_docman&task=cat_view&gid=76&Itemid=13Patch
• http://www.securityfocus.com/bid/19233Exploit
• http://www.securityfocus.com/bid/23113
• http://www.vupen.com/english/advisories/2006/3056
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28080
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33178
• https://www.exploit-db.com/exploits/2089
• https://www.exploit-db.com/exploits/3553
• http://attrition.org/pipermail/vim/2007-March/001457.html
• http://attrition.org/pipermail/vim/2007-March/001458.html
• http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.html
• http://secunia.com/advisories/21305Patch, Vendor Advisory
• http://www.osvdb.org/27651Exploit, Patch
• http://www.osvdb.org/27652
• http://www.osvdb.org/28111
• http://www.osvdb.org/28112
• http://www.osvdb.org/28113
• http://www.ravenswoodit.co.uk/index.php?option=com_docman&task=cat_view&gid=76&Itemid=13Patch
• http://www.securityfocus.com/bid/19233Exploit
• http://www.securityfocus.com/bid/23113
• http://www.vupen.com/english/advisories/2006/3056
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28080
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33178
• https://www.exploit-db.com/exploits/2089
• https://www.exploit-db.com/exploits/3553

Published

Aug 5, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3989PHP remote file inclusion vulnerability in index.php in Knus…
• CVE-2006-3990Multiple PHP remote file inclusion vulnerabilities in Paul M…
• CVE-2006-3991PHP remote file inclusion vulnerability in index.php in Vlad…
• CVE-2006-3992Unspecified vulnerability in the Centrino (1) w22n50.sys, (2…
• CVE-2006-3993PHP remote file inclusion vulnerability in copyright.php in …
• CVE-2006-3994SQL injection vulnerability in the u2u_send_recp function in…
• CVE-2006-3996SQL injection vulnerability in links/index.php in ATutor 1.5…
• CVE-2006-3997PHP remote file inclusion vulnerability in hsList.php in WoW…
• CVE-2006-3998PHP remote file inclusion vulnerability in conf.php in WoWRo…
• CVE-2006-3999ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly e…
• CVE-2006-4000Directory traversal vulnerability in cgi-bin/preview_email.c…
• CVE-2006-4001Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through…