Vulnerability record · CVE-2006-2726 · published 1 June 2006

CVE-2006-2726: Fastpublish cms vulnerability

Fastpublish · Fastpublish Cms

PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files via the config[fsBase] parameter in (1) drucken.php, (2) drucken2.php, (3) email_an_benutzer.php, (4) rechnung.php, (5) suche/search.php and (6) adminbereich/admin.php.

7.5 CVSS 2.0 High EPSS 19% · top 2.7%

7.5CVSS 2.0 base score

19%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

22References, 2 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Fastpublish Cms Fastpublish

References

Link	Tags
http://secunia.com/advisories/20346	ExploitVendor Advisory
http://www.osvdb.org/26157
http://www.osvdb.org/26158
http://www.osvdb.org/26159
http://www.osvdb.org/26160
http://www.osvdb.org/26161
http://www.osvdb.org/26162
http://www.securityfocus.com/bid/18163
http://www.vupen.com/english/advisories/2006/2043
https://exchange.xforce.ibmcloud.com/vulnerabilities/26897
https://www.exploit-db.com/exploits/1848
http://secunia.com/advisories/20346	ExploitVendor Advisory
http://www.osvdb.org/26157
http://www.osvdb.org/26158
http://www.osvdb.org/26159
http://www.osvdb.org/26160
http://www.osvdb.org/26161
http://www.osvdb.org/26162
http://www.securityfocus.com/bid/18163
http://www.vupen.com/english/advisories/2006/2043
https://exchange.xforce.ibmcloud.com/vulnerabilities/26897
https://www.exploit-db.com/exploits/1848

Track CVE-2006-2726 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2008-4519Fastpublish cms path traversal vulnerabilityMultiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a ..…EPSS 2.4%9 Oct 2008 7.5CVE-2008-4518Fastpublish cms sql injection vulnerabilityMultiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbitrary SQL commands via the (1)…EPSS 1.0%9 Oct 2008 6.8CVE-2007-6325Fastpublish cms improper input validation vulnerabilityPHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitrary PHP c…EPSS 11%13 Dec 2007

Source: NIST National Vulnerability Database (record CVE-2006-2726), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.