CVE-2006-5185: Hamweather

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse_code function.

Affected products

• Hamweather Hamweather: up to and including 3.9.8.4; version 3.9.8.3 only

Published 2006-10-10. Last modified 2026-06-16.