CVE-2006-4992

CVE-2006-4992 describes multiple remote file inclusion vulnerabilities in the JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 plugin. Attackers can exploit this by injecting a malicious URL into the mosConfig_absolute_path parameter within wp-comments-post.php, wp-feed.php, or wp-trackback.php, leading to arbitrary PHP code execution. This vulnerability carries a CVSS score of 7.5, indicating high severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially resulting in full compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, exploit code for these specific vulnerabilities is publicly available on ExploitDB. Despite this, there is no evidence of active exploitation, and the vulnerability has received minimal community discussion or media coverage.