CVE-2006-4984

CVE-2006-4984 describes multiple remote file inclusion vulnerabilities in Grayscale BandSite CMS, specifically in mlist_xls.php and addmp3.php. Attackers can exploit this by injecting a malicious URL into the GLOBALS[root_path] parameter, leading to arbitrary PHP code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing unauthenticated remote attackers to achieve partial confidentiality, integrity, and availability impacts with low attack complexity. The FAUCET Risk Score of 53/100 further emphasizes its significant risk. Despite its severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are also absent, suggesting a lack of widespread attention.