high7.5Public exploit code
CVE-2006-5387
PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module allows remote attackers to execute arb…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpBB PlusXL 2.0_272 - 'constants.php' Remote File Inclusion2006-10-13 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpbb Plusxl | Plusxl | Version 20.272 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/22414
- http://securityreason.com/securityalert/1740
- http://www.securityfocus.com/archive/1/448581/100/0/threaded
- http://www.securityfocus.com/bid/20315
- http://www.vupen.com/english/advisories/2006/4038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29520
- https://www.exploit-db.com/exploits/2538
- http://secunia.com/advisories/22414
- http://securityreason.com/securityalert/1740
- http://www.securityfocus.com/archive/1/448581/100/0/threaded
- http://www.securityfocus.com/bid/20315
- http://www.vupen.com/english/advisories/2006/4038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29520
- https://www.exploit-db.com/exploits/2538