CVE-2006-4545 describes a remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha, allowing attackers to execute arbitrary PHP code through the _SERVER parameter in several PHP files. Despite an initial CVSS score of 7.5 indicating high severity with network access, low complexity, and potential for partial confidentiality, integrity, and availability impact, the CVE disputes the claim, stating the _SERVER array cannot be manipulated by an attacker. There is no evidence of active exploitation, though an ExploitDB entry exists. Community and media attention for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
pre-alphaCPE matchmatch criteria | cpe:2.3:a:modulebased_cms:modulebased_cms:pre-alpha:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.