CVE-2006-3158: Eduha Meeting

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action.

Affected products

• Eduha Meeting Eduha Meeting: any version

Published 2006-06-22. Last modified 2026-06-16.