PHP Remote File Inclusion Vulnerability in Fully Modded phpBB by Teake Nutma Foing
CVE-2006-5610

9.8CRITICAL

Key Information:

Vendor

Fully Modded PHPbb

Status
Fully Modded PHPbb
Vendor
CVE Published:
31 October 2006

What is CVE-2006-5610?

A PHP remote file inclusion vulnerability exists in Fully Modded phpBB, specifically in player/includes/common.php. This flaw permits remote attackers to execute arbitrary PHP code by manipulating the phpbb_root_path parameter through crafted URLs. It highlights the risks associated with improper validation of user input and the potential for unauthorized server access.

References

http://secunia.com/advisories/22499
third-party-advisoryx_refsource_SECUNIA

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.