CVE-2006-7169

Ultimate PHP Board <2.0 - RCE

Title source: llm

Description

PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _CONFIG[skin_dir] parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Kacper · phpwebappsphp
https://www.exploit-db.com/exploits/2721

Scores

EPSS 0.0676
EPSS Percentile 91.3%

Details

Status published
Products (1)
ultimate_php_board/ultimate_php_board < 2.0
Published Mar 20, 2007
Tracked Since Feb 18, 2026