CVE-2006-4544

CVE-2006-4544 describes multiple remote file inclusion vulnerabilities in ExBB 1.9.1, specifically when the register_globals PHP setting is enabled. Attackers can exploit this by injecting a malicious URL into the exbb[home_path] parameter within various PHP files in the modules directory, leading to arbitrary PHP code execution. The vulnerability has a CVSS score of 7.5 (High), indicating a severe risk. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to partial compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage surrounding this CVE.