CVE-2006-3128

no score yetEPSS 1.2%

easy-cms easy-cms: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

choose_file.php in easy-CMS 0.1.2, when mod_mime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories directory.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
Published: 2006-06-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

easy-cms:easy-cms

References

http://biyosecurity.be/bugs/easycms.txt
http://secunia.com/advisories/20733
http://securitytracker.com/id?1016335
http://www.osvdb.org/26633
http://www.securityfocus.com/archive/1/437705/100/0/threaded

Check your stack JSON