CVE-2006-6644: PHP remote file inclusion vulnerability in pages/meeting_constants.php in the Meeting (mx_meeting) 1.1.2 an...

Security readout for executives and security teams

This is an old remote file inclusion issue in the mxBB Meeting module. If a vulnerable site is still internet-facing, an attacker could cause the server to run attacker-supplied PHP code. The sources do not show current active exploitation, but the impact described is serious for any legacy deployment still present. Exposure is likely limited to legacy mxBB installations running the Meeting module version 1.1.2 or earlier. The provided affected-product data is incomplete, so teams should verify by application inventory, source review, and historical web-server records rather than relying on CPE matching. Treat this as a legacy exposure cleanup item with high urgency if mxBB remains public-facing. The business risk is server compromise through obsolete web application code, not a modern platform-wide issue. If no mxBB Meeting deployment exists, residual risk is low. Mitigation focus: Inventory mxBB sites for Meeting (mx_meeting) 1.1.2 or earlier.; Disable or remove the Meeting module if it is no longer business-critical.; Check referenced vendor and advisory sources for any documented upgrade or workaround..

Prepared

Jun 29, 2026, 08:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.