CVE-2006-1831

CVE-2006-1831 describes a direct static code injection vulnerability in sysinfo.cgi within coder-world's SysInfo 1.21 and potentially other versions prior to 2.25. This flaw allows unauthenticated remote attackers to execute arbitrary commands by injecting a semicolon-prefixed string into the 'name' parameter during a 'systemdoc' action, which is then incorporated into phpinfo.php. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for full compromise of confidentiality, integrity, and availability. While not listed on the KEV or Hot List, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit/Nuclei modules, or significant community discussion or media coverage.