CVE-2006-5092

CVE-2006-5092 describes a remote file inclusion vulnerability in A-Blog 2, specifically within the navigation/menu.php component. This flaw allows unauthenticated remote attackers to execute arbitrary PHP code by injecting a malicious URL into the navigation_start parameter. With a CVSS score of 7.5, this vulnerability is considered high severity, enabling complete compromise of confidentiality, integrity, and availability of the affected system. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, indicating a potential for exploitation, though there is no evidence of widespread active exploitation or significant community discussion.