CVE-2006-0845: Leif M. Wright Web Blog

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname.

Affected products

• Leif M. Wright Web Blog: version 3.5 only

Published 2006-02-22. Last modified 2026-06-16.