Lucene search

[email protected]CVE-2006-2865

HistoryJun 06, 2006 - 8:06 p.m.

CVE-2006-2865

2006-06-0620:06:00

[email protected]

web.nvd.nist.gov

cve

2006

2865

php

remote file inclusion

vulnerability

template.php

phpbb 2

execute

arbitrary

code

url

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.068 Low

EPSS

Percentile

93.9%

JSON

PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod

Affected configurations

NVD

Node

phpbb_groupphpbbMatch2.0

phpbb_groupphpbbMatch2.0.1

phpbb_groupphpbbMatch2.0.2

phpbb_groupphpbbMatch2.0.3

phpbb_groupphpbbMatch2.0.4

phpbb_groupphpbbMatch2.0.5

phpbb_groupphpbbMatch2.0.6

phpbb_groupphpbbMatch2.0.6c

phpbb_groupphpbbMatch2.0.6d

phpbb_groupphpbbMatch2.0.7

phpbb_groupphpbbMatch2.0.7a

phpbb_groupphpbbMatch2.0.8

phpbb_groupphpbbMatch2.0.8a

phpbb_groupphpbbMatch2.0.9

phpbb_groupphpbbMatch2.0.10

phpbb_groupphpbbMatch2.0.11

phpbb_groupphpbbMatch2.0.12

phpbb_groupphpbbMatch2.0.13

phpbb_groupphpbbMatch2.0.14

phpbb_groupphpbbMatch2.0.15

phpbb_groupphpbbMatch2.0.16

phpbb_groupphpbbMatch2.0.17

phpbb_groupphpbbMatch2.0.18

phpbb_groupphpbbMatch2.0.19

phpbb_groupphpbbMatch2.0.20

phpbb_groupphpbbMatch2.0_beta1

phpbb_groupphpbbMatch2.0_rc1

phpbb_groupphpbbMatch2.0_rc2

phpbb_groupphpbbMatch2.0_rc3

phpbb_groupphpbbMatch2.0_rc4

CPENameOperatorVersion
phpbb_group:phpbbphpbb group phpbbeq2.0
phpbb_group:phpbbphpbb group phpbbeq2.0.1
phpbb_group:phpbbphpbb group phpbbeq2.0.2
phpbb_group:phpbbphpbb group phpbbeq2.0.3
phpbb_group:phpbbphpbb group phpbbeq2.0.4
phpbb_group:phpbbphpbb group phpbbeq2.0.5
phpbb_group:phpbbphpbb group phpbbeq2.0.6
phpbb_group:phpbbphpbb group phpbbeq2.0.6c
phpbb_group:phpbbphpbb group phpbbeq2.0.6d
phpbb_group:phpbbphpbb group phpbbeq2.0.7

CPE	Name	Operator	Version
phpbb_group:phpbb	phpbb group phpbb	eq	2.0
phpbb_group:phpbb	phpbb group phpbb	eq	2.0.1
phpbb_group:phpbb	phpbb group phpbb	eq	2.0.2
phpbb_group:phpbb	phpbb group phpbb	eq	2.0.3
phpbb_group:phpbb	phpbb group phpbb	eq	2.0.4
phpbb_group:phpbb	phpbb group phpbb	eq	2.0.5
phpbb_group:phpbb	phpbb group phpbb	eq	2.0.6
phpbb_group:phpbb	phpbb group phpbb	eq	2.0.6c
phpbb_group:phpbb	phpbb group phpbb	eq	2.0.6d
phpbb_group:phpbb	phpbb group phpbb	eq	2.0.7

Rows per page:

1-10 of 301

References

www.securityfocus.com/archive/1/435869/100/0/threaded

www.securityfocus.com/archive/1/435978/100/0/threaded

www.securityfocus.com/archive/1/435995/100/0/threaded

www.securityfocus.com/archive/1/436118/100/0/threaded

www.securityfocus.com/bid/18255

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.068 Low

EPSS

Percentile

93.9%

JSON

Related for CVE-2006-2865

cvelist1 prion1 nvd1