CVE-2006-6545: PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module fo...

Security readout for executives and security teams

This is an old PHP remote file inclusion issue in the ErrorDocs module for mxBB. If a vulnerable public site still runs ErrorDocs 1.0.0 or earlier, an attacker could cause the server to run attacker-controlled PHP code. The sources do not name a patch or confirmed active exploitation. Exposure is most likely limited to legacy mxBB installations that still have the ErrorDocs or mx_errordocs module installed and reachable from the internet. Modern environments are unlikely to be affected unless they preserve old PHP forum stacks. Treat this as a high-priority legacy exposure check, not a broad modern-platform emergency. If the affected module exists on a public server, prioritize removal or isolation because the impact is server-side code execution. Mitigation focus: Identify and retire any mxBB ErrorDocs installations version 1.0.0 or earlier.; Disable or remove the ErrorDocs module if it is no longer required.; Check archived vendor or maintainer guidance for any fixed release or configuration mitigation..

Prepared

Jun 29, 2026, 08:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.