CVE-2006-3317: Spiffyjr Phpraid

Medium severity, CVSS 5.1. EPSS: 17.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) announcements.php and (2) rss.php, a different set of vectors and affected versions than CVE-2006-3316 and CVE-2006-3116.

Affected products

• Spiffyjr Phpraid: version 3.0.6 only

Published 2006-06-29. Last modified 2026-06-16.