CVE-2006-3987

CVE-2006-3987 describes multiple remote file inclusion vulnerabilities in Knusperleicht FileManager 1.2 and earlier, specifically within the index.php file. Attackers can exploit this by injecting a malicious URL into the dwl_download_path or dwl_include_path parameters, leading to arbitrary PHP code execution. This vulnerability has a CVSS score of 5.1, indicating a medium severity due to its network-based attack vector and potential for partial confidentiality, integrity, and availability impact, though it requires high attack complexity. While not listed on CISA's KEV catalog, an exploit is publicly available on ExploitDB, but there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.