Exploitation Summary
EIP tracks 3 public exploits for CVE-2005-2086.
PoCs published by Metasploit, str0ke, including Metasploit module exploits/unix/webapp/phpbb_highlight.
AI-analyzed exploit summary This Metasploit module exploits a PHP code injection vulnerability in phpBB's viewtopic.php via the 'highlight' parameter, leveraging improper input validation in preg_replace(). It supports multiple versions and automatically detects the appropriate exploit method.
Description
PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.
Exploits (3)
This Metasploit module exploits a PHP code injection vulnerability in phpBB's viewtopic.php via the 'highlight' parameter, leveraging improper input validation in preg_replace(). It supports multiple versions and automatically detects the appropriate exploit method.
This is a Metasploit module exploiting CVE-2005-2086, an arbitrary command execution vulnerability in phpBB 2.0.15. It crafts a malicious HTTP GET request with a payload encoded as chr() function calls, executed via passthru().
This Metasploit module exploits a PHP code injection vulnerability in phpBB's viewtopic.php via the 'highlight' parameter, leveraging improper input validation in preg_replace(). It supports multiple versions of phpBB (2.0.4-2.0.15) and automatically detects the appropriate exploit method.