Lucene search
MitreCVE-2006-5387HistoryOct 18, 2006 - 7:07 p.m.
CVE-2006-5387
2006-10-1819:07:00
mitre
web.nvd.nist.gov
27
cve-2006-5387
php
remote file inclusion
mods
iai
phpbb
vulnerability
arbitrary code execution
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.168
Percentile
96.1%
PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Affected configurations
Node
phpbb_plusxlplusxlMatch20.272
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpbb_plusxl | plusxl | 20.272 | cpe:2.3:a:phpbb_plusxl:plusxl:20.272:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-5387
2006-10-18 19:00:00
exploitdb
exploitdb
phpBB PlusXL 2.0_272 - 'constants.php' Remote File Inclusion
2006-10-13 00:00:00
nvd
nvd
CVE-2006-5387
2006-10-18 19:07:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.168
Percentile
96.1%
Related for CVE-2006-5387