Lucene search
HistoryMar 02, 2007 - 9:18 p.m.
CVE-2006-7090
cve-2006-7090
php
remote file inclusion
phpbb security 1.0.1
vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
87.1%
PHP remote file inclusion vulnerability in phpbb_security.php in phpBB Security 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the php_root_path parameter.
Affected configurations
Node
phpbb_securityphpbb_securityRange≤1.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpbb_security:phpbb_security | phpbb security | le | 1.0.1 |
Related
nvd
nvd
CVE-2006-7090
2007-03-02 21:18:00
cvelist
cvelist
CVE-2006-7090
2007-02-28 00:00:00
nessus
nessus
phpBB Multiple Module phpbb_root_path Parameter Remote File Inclusion
2006-05-04 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
87.1%
Related for CVE-2006-7090