CVE-2006-6763

CVE-2006-6763 describes multiple remote file inclusion vulnerabilities in Keep It Simple Guest Book (KISGB) versions, specifically affecting authenticate.php, admin.php, and upconfig.php. Attackers can exploit these flaws by manipulating the path_to_themes or default_path_for_themes parameters with a malicious URL, leading to arbitrary PHP code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, indicating its exploitability, though there is no evidence of active widespread exploitation or significant community discussion.