CVE-2006-5232

Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code via a URL in the isearch_path parameter in (1) index.php, (2) viewcache.php, (3) sitemap.php, (4) isearch.inc.php, (5) google_sitemap.php, (6) stats.php, or (7) auto_spider_img.php. NOTE: this issue has been disputed by a third party who shows that $isearch_path is set to a constant value. CVE analysis as of 20061010 is inconclusive, although the original researcher is known to make mistakes

• http://www.securityfocus.com/archive/1/448006/100/0/threaded
• http://www.securityfocus.com/archive/1/448099/100/0/threadedVendor Advisory
• http://www.securityfocus.com/archive/1/448225/100/100/threaded
• http://www.securityfocus.com/bid/20401Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29402
• http://www.securityfocus.com/archive/1/448006/100/0/threaded
• http://www.securityfocus.com/archive/1/448099/100/0/threadedVendor Advisory
• http://www.securityfocus.com/archive/1/448225/100/100/threaded
• http://www.securityfocus.com/bid/20401Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29402

Published

Oct 11, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5226PHP remote file inclusion vulnerability in moteur/moteur.php…
• CVE-2006-5227Cross-site scripting (XSS) vulnerability in admin.php in Tor…
• CVE-2006-5228Multiple SQL injection vulnerabilities in the Google Gadget …
• CVE-2006-5229OpenSSH portable 4.1 on SUSE Linux, and possibly other platf…
• CVE-2006-5230PHP remote file inclusion vulnerability in forum.php in Free…
• CVE-2006-5231Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.…
• CVE-2006-5233Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware versi…
• CVE-2006-5234Multiple PHP remote file inclusion vulnerabilities in phpWeb…
• CVE-2006-5235PHP remote file inclusion vulnerability in includes/function…
• CVE-2006-5236SQL injection vulnerability in search.php in 4images 1.7.x a…
• CVE-2006-5237SQL injection vulnerability in Blue Smiley Organizer before …
• CVE-2006-5238Unspecified vulnerability in the file upload module in Blue …