CVE-2006-6887: Logahead Unu

Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), a different vulnerability than CVE-2006-6783. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Logahead Logahead Unu: version 1.0 only

Published 2006-12-31. Last modified 2026-06-16.