CVE-2006-4645

CVE-2006-4645 describes a remote file inclusion vulnerability in Akarru Social BookMarking Engine versions 0.4.3.34 and earlier, and potentially 0.4.4.120. An unauthenticated attacker can exploit this flaw by injecting a malicious URL into the bm_content parameter, leading to arbitrary PHP code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog or Hot List, an exploit module is available on ExploitDB, indicating public knowledge of exploitation methods, though there is no evidence of active exploitation or significant community discussion.