CVE-2006-5021: Redblog

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in (1) the root parameter in imgen.php, and the root_path parameter in (2) admin/config.php, (3) common.php, and (4) admin/index.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected products

• Redblog Redblog: version 0.5 only

Published 2006-09-27. Last modified 2026-06-16.