CVE-2006-6042

CVE-2006-6042 describes a remote file inclusion vulnerability in phpWebThings 1.5.2 and earlier, specifically within the core/editor.php component, when the register_globals setting is enabled. This flaw allows unauthenticated remote attackers to execute arbitrary PHP code by injecting a malicious URL into the editor_insert_bottom parameter. With a CVSS score of 6.8, this vulnerability is of medium severity, indicating that an attacker can exploit it over the network with moderate complexity to achieve partial confidentiality, integrity, and availability impacts. While not listed on the KEV catalog, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.