CVE-2006-3422

no score yetEPSS 2.5%

wonderedit wonderedit pro cms: no CVSS score yet. EPSS 2.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in user_bottom.php, as used by multiple templates including (1) rwb (template/rwb/user_bottom.php), (2) gwb (template/rwb/user_bottom.php, (3) blues, (4) bluwhi, and (5) grns.

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
Published: 2006-07-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

wonderedit:wonderedit_pro_cms

References

http://www.securityfocus.com/bid/18821
https://exchange.xforce.ibmcloud.com/vulnerabilities/27536
https://www.exploit-db.com/exploits/1982
http://www.securityfocus.com/bid/18821
https://exchange.xforce.ibmcloud.com/vulnerabilities/27536

Check your stack JSON