CVE-2006-5222
Dimension of phpBB <= 0.2.6 - Remote File Inclusion via phpbb_root_path Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-5222. PoCs published by SpiderZ.
AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in Dimension of phpBB 0.2.5. It allows an attacker to include and execute arbitrary remote scripts by manipulating the 'phpbb_root_path' parameter in specific PHP files.
Description
Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/themen_portal_mitte.php or (2) includes/logger_engine.php.
Exploits (1)
This exploit demonstrates a remote file inclusion vulnerability in Dimension of phpBB 0.2.5. It allows an attacker to include and execute arbitrary remote scripts by manipulating the 'phpbb_root_path' parameter in specific PHP files.