CVE-2006-3966: Carlos Sanchez Valle Mynewsgroups

High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups :) 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myng_root parameter.

Affected products

• Carlos Sanchez Valle Mynewsgroups: up to and including 0.6b
• PHP Layers Menu PHP Layers Menu: version 2.3.5 only

Published 2006-08-01. Last modified 2026-06-16.