CVE-2006-4716

CVE-2006-4716 describes a remote file inclusion vulnerability in Fire Soft Board (FSB) RC3 and earlier, specifically within the demarrage.php script. An attacker can exploit this by injecting a malicious URL into the 'racine' parameter, leading to the execution of arbitrary PHP code on the affected server. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog or having Metasploit/Nuclei exploits, public exploit code is available on ExploitDB, though there is minimal community discussion or media coverage surrounding it.