CVE-2006-3527

CVE-2006-3527 describes multiple remote file inclusion vulnerabilities in BosClassifieds Classified Ads, specifically affecting the bosdev bosclassifieds_classified_ads product. Attackers can exploit this by injecting a URL into the 'insPath' parameter of several PHP scripts (index.php, recent.php, account.php, classified.php, or search.php) to execute arbitrary PHP code. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.