CVE-2006-0308: PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other v...

Security readout for executives and security teams

CVE-2006-0308 is an old remote file inclusion issue in htmltonuke.php for the htmltonuke module, reported for htmltonuke 2.0 alpha and possibly other versions. If exposed, an attacker could cause the server to run arbitrary PHP code through the filnavn parameter. Likely exposure is limited to legacy PHP-Nuke environments that installed the htmltonuke module, especially htmltonuke 2.0 alpha. The bundle lists affected vendor and product as n/a, so asset validation is required before assuming exposure. Prioritize validation for legacy internet-facing PHP-Nuke assets. Business urgency depends on whether this obsolete module is present; if it is exposed, arbitrary code execution potential makes remediation or retirement important despite the CVE’s age. Mitigation focus: Inventory PHP-Nuke deployments for the htmltonuke module and htmltonuke.php.; Check archived vendor or project guidance for fixed versions or removal advice.; Retire the module if no maintained fix or business need exists..

Prepared

Jun 29, 2026, 15:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.