CVE-2006-5380

CVE-2006-5380 describes a remote file inclusion vulnerability in Contenido CMS, specifically affecting cms/dbfs.php and cms/front_content.php. Attackers could exploit this by injecting a malicious URL into the "contenido_path" parameter, leading to arbitrary PHP code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing unauthenticated attackers to achieve partial confidentiality, integrity, and availability impacts with low attack complexity. Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.