CVE-2006-3532: Pivot

Medium severity, CVSS 5.1. EPSS: 8% chance of exploitation in the next 30 days.

PHP file inclusion vulnerability in includes/edit_new.php in Pivot 1.30 RC2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Paths[extensions_path] parameter.

Affected products

• Pivot Pivot: version 1.30_rc2 only

Published 2006-07-12. Last modified 2026-06-16.