← Back

CVE-2006-5209

nvd nist
Published: Oct 10, 2006Modified: Apr 23, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected (31)

Products: Phpbb Group: Phpbb
1 product
Phpbb
Configuration A
31 vulnerable
Vulnerable SoftwareAffected Versions
Phpbb Group
Version 2.0.10
Version 2.0.11
Version 2.0.12
Version 2.0.13
Version 2.0.14
Version 2.0.15
Version 2.0.16
Version 2.0.17
Version 2.0.18
Version 2.0.19
Version 2.0.1
Version 2.0.20
Version 2.0.21
Version 2.0.2
Version 2.0.3
Version 2.0.4
Version 2.0.5
Version 2.0.6
Version 2.0.6c
Version 2.0.6d
Version 2.0.7
Version 2.0.7a
Version 2.0.8
Version 2.0.8a
Version 2.0.9
Version 2.0
Version 2.0_beta1
Version 2.0_rc1
Version 2.0_rc2
Version 2.0_rc3
Version 2.0_rc4

References (4)

Timeline

No history available yet.