CVE-2006-6113

CVE-2006-6113 describes an information disclosure vulnerability in Monkey Boards version 0.3.5, allowing remote attackers to obtain sensitive information. By directly requesting specific PHP files (include/admin_auth.inc.php and include/engine/class.compiler.php), an attacker can trigger error messages that reveal the full path of the web application, though this is only a risk if the default script path has been altered. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, leading to a potential impact of partial confidentiality loss. There is no evidence of active exploitation, no known exploit code in common frameworks like Metasploit or Nuclei, and minimal community discussion or media coverage, suggesting it is not a widely targeted vulnerability.