CVE-2006-1921

CVE-2006-1921 describes a remote command execution vulnerability in PHP Net Tools version 2.7.1. Attackers can exploit this by injecting shell metacharacters into the "host" parameter of nettools.php. This vulnerability carries a CVSS score of 6.4, indicating a medium severity, as it can be exploited remotely with low complexity and without authentication, potentially leading to partial confidentiality and integrity impacts. While not listed on the KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.