CVE-2006-2865
phpBB 2 - Remote File Inclusion via Template Page Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-2865. PoCs published by Canberx.
AI-analyzed exploit summary The provided text describes a remote file-include vulnerability in phpBB due to improper input sanitization. An attacker can exploit this to include and execute arbitrary remote PHP code in the context of the webserver process.
Description
PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod
Exploits (1)
The provided text describes a remote file-include vulnerability in phpBB due to improper input sanitization. An attacker can exploit this to include and execute arbitrary remote PHP code in the context of the webserver process.