high7.5Public exploit code
CVE-2006-5209
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion2006-10-04 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpbb Group | Phpbb | Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 |