CVE-2006-5667: Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to exe...

Security readout for executives and security teams

CVE-2006-5667 affects P-Book 1.17 and earlier. A remote attacker could make the application load PHP code from an attacker-controlled URL through the pb_lang parameter, potentially taking control of the web application server. Exposure is likely limited to legacy internet-facing P-Book deployments, especially versions 1.17 and earlier. The CVE metadata does not provide reliable CPEs or vendor fields, so inventory must rely on application discovery and version checks. Prioritize quickly if P-Book is deployed. The business risk is server compromise through a legacy web app, but the scope is narrow and evidence of active exploitation is not provided. Mitigation focus: Identify and remove unsupported P-Book 1.17 or earlier installations.; Check vendor or archived advisory guidance for any fixed release.; Restrict public access to admin.php and pbook.php until remediated..

Prepared

Jun 29, 2026, 09:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.