CVE-2006-1576

CVE-2006-1576 describes a direct static code injection vulnerability in QLnews 1.2, allowing remote authenticated administrators to execute arbitrary PHP code by modifying the config.php file. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low access complexity, and potential for partial compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been identified, the vulnerability still poses a risk if an attacker gains administrative credentials.