CVE-2006-3076: Phpbluedragon CMS

Medium severity, CVSS 6.4. EPSS: 2.6% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in software_upload/public_includes/pub_templates/vphptree/template.php in PhpBlueDragon CMS 2.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter.

Affected products

• Phpbluedragon Phpbluedragon CMS: version 2.9.1 only

Published 2006-06-19. Last modified 2026-06-16.