CVE-2006-0214: Indexcor Ezdatabase

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to visitorupload.php, as demonstrated using phpinfo and include function calls.

Affected products

• Indexcor Ezdatabase: version 2.0 only; version 2.1.2 only

Published 2006-01-15. Last modified 2026-06-16.