CVE-2006-2151

This exploit leverages a remote file inclusion vulnerability in PHPBB TopList <= 1.3.8 by injecting a malicious PHP payload via a crafted HTTP request. It sets up a local listener to serve the payload and triggers its execution on the target server.

This exploit leverages a remote file inclusion vulnerability in TopList for PHPBB <= 1.3.8 by injecting a malicious URL into the 'phpbb_root_path' parameter, allowing arbitrary command execution via a remote file.