CVE-2006-7208

Published: Jun 26, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum) component (aka phpBB component) 1.2.4RC3 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected (2)

Products: Adam Van Dongen: Com Forum, Phpbb Component

Adam Van Dongen

2 products

Phpbb Component

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Adam Van Dongen Com Forum	Version 1.2.4rc3
Adam Van Dongen Phpbb Component	Version 1.2.4rc3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://osvdb.org/45364

Source: cve@mitre.org

http://securityreason.com/securityalert/2836

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/472005/100/0/threaded

Source: cve@mitre.org

https://www.exploit-db.com/exploits/1995

Source: cve@mitre.org

http://osvdb.org/45364

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/2836

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/472005/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/1995

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.