CVE-2006-5325: Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for
CVE-2006-5325 is a high-severity flaw (CVSS 7.5) affecting security suite ip logger. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) mkb.php, (2) iplogger.php, (3) admin_board2.php, or (4) admin_logger.php in includes/, different vectors than CVE-2006-5224.
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.5 (High) |
| EPSS exploit chance | 1.3% (top 30%) |
| CISA exploited list | No |
| Published | 2006-10-17 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2006-5325?
security suite ip logger: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2006-5325 being exploited?
CVE-2006-5325 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2006-5325 affect?
CVE-2006-5325 affects security suite ip logger. Severity is high (CVSS 7.5). Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) mkb.php, (2) iplogger
How urgent is CVE-2006-5325?
Priority 44/100. High severity
Software pages
Related CVEs
- CVE-2006-5224 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in includes/logger_engine.php in Dimitri Seitz Security Suite IP Logge