CVE-2006-5505: BEN3W 2bgal

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute arbitrary PHP code via the lang parameter to (1) admin/configuration.inc.php, (2) admin/creer_album.inc.php, (3) admin/changepwd.php.inc, and unspecified other files. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected products

• BEN3W 2bgal: version 3.0 only

Published 2006-10-25. Last modified 2026-06-16.