CVE-2006-5410: PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allow...

Security readout for executives and security teams

This is an old but serious web application flaw in BoonEx Dolphin 5.2. If the vulnerable script is reachable, an attacker may be able to make the server load attacker-controlled PHP code. That can mean full compromise of the website or hosting account. Exposure appears limited to legacy BoonEx Dolphin 5.2 installations where the affected template script is still present and publicly reachable. The source bundle lists affected vendor/product metadata as n/a, so asset confirmation is required. Prioritize remediation if any public Dolphin 5.2 system remains in service. The business risk is high because successful exploitation could execute server-side code, but urgency depends on whether this legacy product exists in the environment. Mitigation focus: Inventory and retire any remaining BoonEx Dolphin 5.2 deployments.; Check BoonEx or successor vendor guidance for fixed versions or migration paths.; Remove public access to the affected script if business use is not required..

Prepared

Jun 29, 2026, 09:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.