NetSight
IP …
high7.5Public exploit code

CVE-2004-1535

PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the code.

Affected products

VendorProductAffected versions
Phpbb GroupPhpbb
Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5

References