CVE-2006-3771: Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow...

Security readout for executives and security teams

CVE-2006-3771 is a remote file inclusion issue in iManage CMS 4.0.12 and earlier. If an affected site is reachable, a remote attacker may be able to make the server run attacker-controlled PHP code. The source bundle does not provide CVSS, patch details, or evidence of active exploitation. Exposure is limited to organizations still running iManage CMS 4.0.12 or earlier, especially internet-facing PHP deployments. Because this is a 2006-era CMS, modern exposure is likely uncommon but potentially severe where legacy sites remain online. Prioritize immediately if any affected iManage CMS instance is internet-facing. The business risk is full compromise of the web application server, but urgency depends on whether this obsolete CMS is actually present in your environment. Mitigation focus: Inventory public web properties for iManage CMS 4.0.12 or earlier.; Remove or replace affected legacy iManage CMS deployments where possible.; Check vendor or archived project guidance for any official fixed version..

Prepared

Jun 29, 2026, 11:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.