CVE-2006-5803: PHP remote file inclusion vulnerability in modules/mx_smartor/album.php in the mxBB Smartor Album module 1....

Security readout for executives and security teams

CVE-2006-5803 is a remote file inclusion flaw in the mxBB Smartor Album module. A vulnerable site could be tricked into loading attacker-controlled PHP through the module_root_path parameter, which may lead to arbitrary PHP code execution. The bundle does not provide a CVSS score or active exploitation evidence. Exposure is likely limited to legacy PHP sites still running mxBB with the Smartor Album module 1.02 or earlier, especially where modules/mx_smartor/album.php is web-accessible. Treat this as high priority for any internet-facing legacy mxBB deployment. The vulnerable component is old, the impact can be code execution, and public exploit information is referenced. If the component is absent, business risk is low. Mitigation focus: Check official mxBB or module guidance for a fixed version or workaround.; Disable or remove the Smartor Album module if it is not required.; Restrict public access to the affected album.php route while assessing exposure..

Prepared

Jun 29, 2026, 09:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.