CVE-2006-5410: Boonex Dolphin

Medium severity, CVSS 5.1. EPSS: 1.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter. NOTE: it is possible that this issue overlaps CVE-2006-4189.

Affected products

• Boonex Dolphin: version 5.2 only

Published 2006-10-20. Last modified 2026-06-16.