CVE-2006-2864

CVE-2006-2864 describes multiple remote file inclusion vulnerabilities within BlueShoes Framework version 4.6. Attackers can exploit these flaws by injecting malicious PHP code via specific URL parameters, such as APP[path][applications] or APP[path][core], into various PHP files. With a CVSS score of 5.1 (medium severity), the vulnerability is network-exploitable with high access complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While not on CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.