CVE-2006-5811

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[srcdir] parameter.

• http://advisories.echo.or.id/adv/adv60-theday-2006.txtExploit, Vendor Advisory
• http://secunia.com/advisories/22695Vendor Advisory
• http://securityreason.com/securityalert/1844
• http://www.securityfocus.com/archive/1/450698/100/0/threaded
• http://www.vupen.com/english/advisories/2006/4382
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30036
• https://www.exploit-db.com/exploits/2727
• http://advisories.echo.or.id/adv/adv60-theday-2006.txtExploit, Vendor Advisory
• http://secunia.com/advisories/22695Vendor Advisory
• http://securityreason.com/securityalert/1844
• http://www.securityfocus.com/archive/1/450698/100/0/threaded
• http://www.vupen.com/english/advisories/2006/4382
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30036
• https://www.exploit-db.com/exploits/2727

Published

Nov 8, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5805Microsoft Internet Explorer 7 allows remote attackers to cau…
• CVE-2006-5806SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when…
• CVE-2006-5807Cisco Secure Desktop (CSD) before 3.1.1.45 allows local user…
• CVE-2006-5808The installation of Cisco Secure Desktop (CSD) before 3.1.1.…
• CVE-2006-5809Multiple unspecified vulnerabilities in Jonathon J. Freeman …
• CVE-2006-5810Cross-site scripting (XSS) vulnerability in modules/wfdownlo…
• CVE-2006-5812Unspecified vulnerability in Kerio MailServer allows attacke…
• CVE-2006-5813Unspecified vulnerability in Novell eDirectory 8.8 allows at…
• CVE-2006-5814Unspecified vulnerability in Novell eDirectory allows remote…
• CVE-2006-5815Stack-based buffer overflow in the sreplace function in ProF…
• CVE-2006-5816Multiple PHP remote file inclusion vulnerabilities in Dmitry…
• CVE-2006-5817prl_dhcpd in Parallels Desktop for Mac Build 1940 uses insec…