CVE-2006-6086: E-Ark

Medium severity, CVSS 5.1. EPSS: 3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_pear_path parameter.

Affected products

• E-Ark E-Ark: version 1.0 only

Published 2006-11-24. Last modified 2026-06-16.