CVE-2006-5302

Public exploit available. Not confirmed exploited in the wild yet. A vendor fix is available.

CVSS 2.07.5High EPSS percentile97th16% chance in 30 days CISA KEVNot listedNo confirmed exploitation
Public exploit: 1 source FixVendor fixNo build named by the sources

Published 2006-10-17Updated 2026-04-23Sources: CVE.org, NVD

NVD CVE.org

What to do

The vendor has published a fix. Version details are below where the sources state them.

Steps

Written by AI from the record

Check whether you run Redaction System 1.0000, including any public-facing web or mobile pages.
Ask your IT provider or vendor for the vendor remediation for CVE-2006-5302; no exact fixed version is specified in the available findings.
Until it is fixed, restrict public access to the affected application pages and block requests that supply web addresses in the language settings.
Review web-server logs for unusual requests to conn.php, sesscheck.php, wap/conn.php, wap/sesscheck.php, or index.php.

Vendor advisory Some work to apply

Is your organisation exposed?Request an assessment to establish which checks fit your systems.

What it is

From the CVE record

Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang_prefix parameter to (a) conn.php, (b) sesscheck.php, (c) wap/conn.php, or (d) wap/sesscheck.php, or the (2) lang parameter to (e) index.php.

In plain language

Written by AI from the record

Redaction System 1.0000 has a serious flaw that can let an internet attacker take over the application, so affected businesses should act soon.

Unauthenticated remote PHP code execution in Redaction System 1.0000 through attacker-controlled URL values supplied to vulnerable language-file parameters.

If you're affected

Full application takeover
Sensitive data exposure
Website defacement
Service disruption
Malware installation

What is it

This is a weakness in how Redaction System loads language-related files. It is like allowing a visitor to hand your receptionist a document from any address and having the receptionist automatically follow its instructions; an attacker can use that opening to control the application.

Who is affected

This matters to you if you use or run Redaction System 1.0000. It is especially relevant for businesses hosting the application themselves or making its pages available online; it is only a risk if an attacker can reach the vulnerable pages.

How urgent is it

Attackers have a public exploit available for this flaw, so treat it as an important near-term remediation. It is not listed in CISA's Known Exploited Vulnerabilities catalog, but public-facing installations should have access restricted while the vendor remediation is assessed.

What to do — in detail

Confirm whether Redaction System 1.0000 is installed and whether the affected endpoints are internet-reachable: conn.php, sesscheck.php, wap/conn.php, wap/sesscheck.php, and index.php. The available findings identify version 1.0000 but do not provide a fixed release or branch-specific target; obtain the vendor remediation before upgrading or replacing the software. If patching is delayed, remove public access to the application or enforce network restrictions so untrusted users cannot reach those scripts, and block requests containing URL values in lang_prefix or lang. Review web-server and PHP logs for requests to those files with suspicious external URL values, plus unexpected new PHP files, processes, or outbound connections. There is no CISA KEV due date because this CVE is not listed in KEV.

Technical context

CVSS 7.5 (High): AV:N/AC:L/Au:N/C:P/I:P/A:P. The issue is CWE-94, remote file inclusion leading to arbitrary PHP code execution through URL-controlled lang_prefix parameters in conn.php, sesscheck.php, wap/conn.php, and their wap equivalents, or the lang parameter in index.php. One public exploit is known. EPSS predicts a 15.6% likelihood and is rising (97th percentile); this is a prediction, not confirmation of exploitation. The CVE is not in CISA KEV.

This is a general assessment based on public vulnerability data. It does not account for your specific infrastructure — when in doubt, consult a security specialist.