medium6.8Public exploit code
CVE-2006-7208
PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum) component (aka phpBB component) 1.2.4RC3 and earlier for Mambo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mambo Component com_forum 1.2.4RC3 - Remote File Inclusion2006-07-08 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum) component (aka phpBB component) 1.2.4RC3 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adam Van Dongen | Com Forum | Version 1.2.4rc3 |
| Adam Van Dongen | Phpbb Component | Version 1.2.4rc3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/45364
- http://securityreason.com/securityalert/2836
- http://www.securityfocus.com/archive/1/472005/100/0/threaded
- https://www.exploit-db.com/exploits/1995
- http://osvdb.org/45364
- http://securityreason.com/securityalert/2836
- http://www.securityfocus.com/archive/1/472005/100/0/threaded
- https://www.exploit-db.com/exploits/1995