CVE-2006-4827

CVE-2006-4827 describes multiple remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier versions. Attackers can exploit these flaws by injecting a malicious URL into the 'art' parameter of admin.php, chart.php, modes.php, or stats.php, enabling arbitrary PHP code execution. The vulnerability has a CVSS score of 5.1, indicating a medium severity, with a network attack vector and high attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, an ExploitDB entry (EDB-2359) confirms the existence of exploit code, though there is no evidence of active exploitation or significant community discussion.