CVE-2006-0687

CVE-2006-0687 describes a file inclusion vulnerability in DocMGR version 0.54.2, specifically within the process.php script. This flaw arises from the failure to initialize the $siteModInfo variable during direct requests, enabling remote attackers to include arbitrary local or potentially remote files by manipulating the includeModule and siteModInfo variables. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N), this vulnerability is easily exploitable over the network with low attack complexity, leading to potential information disclosure or arbitrary code execution. While not listed in CISA's KEV catalog and showing no active exploitation or significant community discussion, an exploit module for remote command execution is available on ExploitDB.