Unscored CVE-2006-5435 EUVD-2006-5420GHSA-8684-vqvg-qxwp

PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and earlier allows remote attackers to execute arbitrary PHP code vi…

Published Oct 20, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: CVE and the vendor dispute this vulnerability because $phpbb_root_path is defined before use

References

20061018 PhpBB<=2.0.10 (groupcp.php) Remote File Include Vulnerability mailing-list
20061018 Re: PhpBB<=2.0.10 (groupcp.php) Remote File Include Vulnerability mailing-list