CVE-2006-5259: PHP remote file inclusion vulnerability in param_editor.php in Compteur 2 allows remote attackers to execut...

Security readout for executives and security teams

Compteur 2 contains a remote file inclusion flaw in param_editor.php. A remote attacker could supply a URL through the folder parameter and cause the server to run arbitrary PHP code. That could lead to full compromise of an exposed legacy site. Exposure is most likely limited to legacy Compteur 2 deployments where param_editor.php remains reachable from untrusted networks. The supplied affected-product metadata is incomplete, so asset discovery should verify the application and file path directly. Prioritize this if Compteur 2 is still deployed. The business risk is server compromise through an old, publicly documented web application flaw. If no deployment exists, document non-exposure and move on. Mitigation focus: Find and retire any remaining Compteur 2 installations.; Remove or restrict access to param_editor.php if the application cannot be retired.; Check original vendor or trusted advisory guidance for any available fixed release..

Prepared

Jun 29, 2026, 10:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.