21841Third-party advisory
http://secunia.com/advisories/21841 CVE-2006-4780
phpBB XS 0.58 - 'functions.php' Remote File Inclusion
Record summary
CVE-2006-4780 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBphpBB XS 0.58 - 'functions.php' Remote File InclusionExploitDB exploitby AzzCoderNot analyzed1 file
References
81576Third-party advisory
http://securityreason.com/securityalert/1576 20060912 AzzCoder => phpBB XS 0.58 Remote File Includemailing list
http://www.securityfocus.com/archive/1/445816/100/0/threaded 19961vdb entry
http://www.securityfocus.com/bid/19961 ADV-2006-3568vdb entry
http://www.vupen.com/english/advisories/2006/3568 phpbbxs-functions-file-include(28879)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/28879 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-4780 2349exploit
https://www.exploit-db.com/exploits/2349