CVE-2006-5318

CVE-2006-5318 describes a remote file inclusion vulnerability in Nayco JASmine (aka Jasmine-Web) version 0.0.2. An unauthenticated attacker can exploit this flaw by manipulating the 'section' parameter in index.php with an FTP URL, leading to the execution of arbitrary PHP code on the server. With a CVSS score of 7.5 (high), this vulnerability is easily exploitable over the network with low attack complexity, potentially resulting in partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.