CVE-2006-5085: Pixel Motion Blog

High severity, CVSS 7.5. EPSS: 47.3% chance of exploitation in the next 30 days.

Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variables.php.

Affected products

• Pixel Motion Pixel Motion Blog: version 2.1.1 only

Published 2006-09-29. Last modified 2026-06-16.