CVE-2006-2129: Deltascripts Pro Publish

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings, which are stored in set_inc.php.

Affected products

• Deltascripts Pro Publish: version 2.0 only

Published 2006-05-01. Last modified 2026-06-16.