CVE-2006-2283

CVE-2006-2283 describes multiple remote file inclusion vulnerabilities in SpiffyJr phpRaid versions 2.9.5 through 3.0.b3. Attackers can execute arbitrary PHP code by injecting a URL into the phpbb_root_path parameter in auth.php and auth_phpbb (when the phpBB portal is enabled), or the smf_root_path parameter in auth.php and auth_SMF (when the SMF portal is enabled). This vulnerability has a CVSS score of 7.5, indicating high severity. It is easily exploitable over the network with low attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE.