CVE-2006-2182

CVE-2006-2182 describes multiple remote file inclusion vulnerabilities in Albinator versions 2.0.8 and earlier, specifically within eday.php, eshow.php, and forgot.php. Attackers can exploit these flaws by injecting a URL into the Config_rootdir parameter, enabling the execution of arbitrary PHP code on the affected system. This vulnerability carries a CVSS score of 6.4, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to unauthorized information disclosure and modification. While there is no evidence of active exploitation (KEV: No) and minimal community discussion or media coverage, an exploit is publicly available on ExploitDB (EDB-1744). Despite its age, the FAUCET Risk Score of 89/100 suggests a significant risk if unpatched.