← Vulnerability feed

Vulnerability record · CVE-2006-5183 · published 10 October 2006

CVE-2006-5183: Dayfox designs dayfox blog vulnerability

DDayfox Designs · Dayfox Blog

Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the slogin parameter in the (1) adminlog.php, (2) postblog.php, (3) index.php, or (4) index2.php script in /edit.

7.5 CVSS 2.0 High EPSS 1.5% · top 27.4%
7.5CVSS 2.0 base score
1.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the slogin parameter in the (1) adminlog.php, (2) postblog.php, (3) index.php, or (4) index2.php script in /edit.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://securityreason.com/securityalert/1694
http://www.securityfocus.com/archive/1/447500/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/29310
http://securityreason.com/securityalert/1694
http://www.securityfocus.com/archive/1/447500/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/29310

Track CVE-2006-5183 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2008-3564Dayfox designs dayfox blog path traversal vulnerabilityMultiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execute arbitrary local files via a …EPSS 2.5%7.5CVE-2007-0150Dayfox designs dayfox blog vulnerabilityMultiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitrary PHP code via a URL in the …EPSS 1.8%7.5CVE-2006-2522Dayfox designs dayfox blog vulnerabilityDayfox Blog 2.0 and earlier stores user credentials in edit/slog_users.txt under the web document root with insufficient access control, which allows…EPSS 1.9%6.8CVE-2007-1525Dayfox designs dayfox blog vulnerabilityDirect static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the ca…EPSS 37%

Source: NIST National Vulnerability Database (record CVE-2006-5183), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.