CVE-2006-7146: Cuttlefish Leicestershire Communityportals

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cp_root_path parameter, a different vector than CVE-2006-5280. NOTE: CVE disputes this issue, since bug.php is not in communityPortals source distributions

Affected products

• Cuttlefish Leicestershire Communityportals: up to and including 1.0

Published 2007-03-07. Last modified 2026-06-16.