CVE-2006-6567: PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 mo...

Security readout for executives and security teams

CVE-2006-6567 affects the Knowledge Base (mx_kb) 2.0.2 module for mxBB. The reported issue could let a remote attacker make the application load attacker-controlled PHP code, which may lead to server compromise. The source bundle does not provide CVSS scoring or a named fixed version. Exposure is most likely on legacy, internet-facing mxBB installations that still run the Knowledge Base (mx_kb) 2.0.2 module. The bundle lists affected vendor and product metadata as n/a, so asset teams should validate by installed module, version, and file path rather than CPE matching. Treat confirmed exposure as urgent because the reported impact is remote PHP code execution. Priority drops if the organization has no mxBB or mx_kb footprint. The main business action is rapid legacy asset confirmation, followed by removal, upgrade, or isolation based on maintainer guidance. Mitigation focus: Inventory mxBB sites for the Knowledge Base (mx_kb) 2.0.2 module.; Check vendor or maintainer guidance for fixed versions or removal instructions.; Disable or remove mx_kb if no supported fix is available..

Prepared

Jun 29, 2026, 08:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.