PHP Remote File Inclusion Vulnerability in Activity MOD Plus for phpBB
CVE-2006-2735

Currently unrated

Key Information:

Vendor

Activity Mod Plus

Status
Activity Mod Plus
Vendor
CVE Published:
1 June 2006

What is CVE-2006-2735?

A remote file inclusion vulnerability exists in Activity MOD Plus (Amod) 1.1.0 used with phpBB when register_globals is enabled. Attackers can exploit this flaw by manipulating the phpbb_root_path parameter, allowing them to execute arbitrary PHP code on the server. This vulnerability resembles others previously identified and demands prompt attention to secure affected installations.

References

http://www.nukedx.com/?viewdoc=38
x_refsource_MISC
http://www.securityfocus.com/archive/1/435298/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://phpbb-tweaks.com/topics.html-p-17623#17623
x_refsource_CONFIRM

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.