CVE-2006-4428

CVE-2006-4428 describes a remote file inclusion vulnerability in Jupiter CMS version 1.1.5, specifically within the index.php file. This flaw could allow remote attackers to execute arbitrary PHP code by manipulating the 'template' parameter, although the CVE record itself disputes this claim, stating the variable is statically defined. Despite the dispute, the vulnerability is rated as Critical with a CVSS score of 9.8, indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. While not listed on the KEV catalog, an exploit for this vulnerability is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.