CVE-2006-6800: PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote...

Security readout for executives and security teams

CVE-2006-6800 is an old remote file inclusion issue in the Limbo CMS event module 1.0. If a vulnerable site is still online, an attacker could make the server run attacker-controlled PHP code. The risk is mainly for legacy, forgotten PHP deployments. Exposure is likely limited to internet-facing Limbo CMS installations using the event module 1.0. The CVE metadata lacks normalized affected-product and version identifiers, so validation depends on asset inventory and application inspection. Prioritize immediately if Limbo CMS is exposed to the internet, because successful exploitation could mean full application compromise. If the organization has no Limbo CMS or event module usage, document that finding and close as not applicable. Mitigation focus: Identify any Limbo CMS deployments and confirm whether event module 1.0 is installed.; Remove or disable the vulnerable event module if it is not required.; Check archived vendor or maintainer guidance for any available fixed module release..

Prepared

Jun 29, 2026, 08:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.