medium5.1Public exploit code
CVE-2006-2675
PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- UBBCentral UBB.Threads 5.x/6.x - Multiple Remote File Inclusions2006-05-28 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ubbcentral | Ubb.Threads | through 6.5.3 Versions 3.4, 3.5, 5.0, 5.5.1, 6.0 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/985
- http://www.securityfocus.com/archive/1/435288/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26866
- http://securityreason.com/securityalert/985
- http://www.securityfocus.com/archive/1/435288/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26866