CVE-2006-3554

CVE-2006-3554 is a directory traversal vulnerability in MKPortal 1.0.1 Final's index.php, allowing remote attackers to include and execute arbitrary local files. This is achieved by manipulating the "language" cookie with directory traversal sequences, potentially leading to the injection and execution of malicious PHP code. The vulnerability has a CVSS score of 7.5, indicating high severity with low attack complexity, and could result in partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.