Critical · 9.8 CVE-2006-5610 EUVD-2006-5595GHSA-jm3m-g3qw-qr2v

PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 202…

Published Oct 31, 2006 · Updated Nov 3, 2026 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

References

22499 third-party-advisory