CVE-2006-4961: Blue Dragon PHP Blue Dragon

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php.

Affected products

• Blue Dragon PHP Blue Dragon: version platinum_2.8.0 only; version platinum_2.9.1 only

Published 2006-09-23. Last modified 2026-06-16.