Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-mxd8-s8jm-37gk
Vulnerability ID VCID-mxd8-s8jm-37gk
Aliases CVE-2006-0626
Summary SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00928 https://api.first.org/data/v1/epss?cve=CVE-2006-0626
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2006-0626
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0626
352077 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352077
OSVDB-23087;CVE-2006-0626 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/1482.php
Data source Exploit-DB
Date added Feb. 7, 2006
Description SPIP 1.8.2g - Remote Command Execution
Ransomware campaign use Known
Source publication date Feb. 8, 2006
Exploit type webapps
Platform php
Source update date June 21, 2016
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.76405
EPSS Score 0.00928
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T13:40:39.729287+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0