CVE-2006-5637: PHP remote file inclusion vulnerability in faq_reply.php in Faq Administrator 2.1b allows remote attackers...

Security readout for executives and security teams

This old vulnerability describes a remote code execution issue in Faq Administrator 2.1b. If the affected PHP file is publicly reachable, an attacker could cause the server to run attacker-controlled PHP code through the email parameter. No CVSS score is provided in the bundle. Exposure is most likely limited to legacy internet-facing PHP sites still running Faq Administrator 2.1b with faq_reply.php reachable. Modern environments are unlikely to be affected unless this old application was retained or copied forward. Prioritize if legacy PHP applications remain publicly exposed. The business risk is server compromise from a very old, publicly documented issue, but urgency depends on whether this specific software is still present. Mitigation focus: Identify whether Faq Administrator 2.1b exists in any web roots.; Remove or retire the application if it is no longer required.; Check vendor or trusted advisory guidance for a fixed version..

Prepared

Jun 29, 2026, 09:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.