Lucene search

[email protected]CVE-2006-5301

HistoryOct 17, 2006 - 3:07 p.m.

CVE-2006-5301

2006-10-1715:07:00

CWE-94

[email protected]

web.nvd.nist.gov

php

remote file inclusion

vulnerability

spamblockermodv

phpbb

cve-2006-5301

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.114 Low

EPSS

Percentile

95.3%

JSON

PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected configurations

NVD

Node

phpbbspamblockermodRange≤1.0.2

phpbbspamblockermodMatch1.0

phpbbspamblockermodMatch1.0.1

CPENameOperatorVersion
phpbb:spamblockermodphpbb spamblockermodle1.0.2
phpbb:spamblockermodphpbb spamblockermodeq1.0
phpbb:spamblockermodphpbb spamblockermodeq1.0.1

CPE	Name	Operator	Version
phpbb:spamblockermod	phpbb spamblockermod	le	1.0.2
phpbb:spamblockermod	phpbb spamblockermod	eq	1.0
phpbb:spamblockermod	phpbb spamblockermod	eq	1.0.1

References

marc.info/?l=bugtraq&m=116076619122083&w=2

secunia.com/advisories/22356

www.securityfocus.com/bid/20501

www.vupen.com/english/advisories/2006/4028

exchange.xforce.ibmcloud.com/vulnerabilities/29506

www.exploit-db.com/exploits/2533

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.114 Low

EPSS

Percentile

95.3%

JSON

Related for CVE-2006-5301

cvelist1 nvd1 nessus1