CVE-2006-5506: Wiclear

High severity, CVSS 7.5. EPSS: 16.3% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1) inc/prepend.inc.php, (2) inc/lib/boxes.lib.php, (3) inc/lib/tools.lib.php, (4) tools/trackback/index.php, and (5) tools/utf8conversion/index.php in admin/; and (6) prepend.inc.php, (7) lib/boxes.lib.php, and (8) lib/history.lib.php in inc/.

Affected products

• Wiclear Wiclear: version 0.10 only

Published 2006-10-25. Last modified 2026-06-16.