Lucene search
HistoryMar 07, 2007 - 8:19 p.m.
CVE-2006-7147
cve-2006-7147
php
remote file inclusion
vulnerability
phpbb
import tools mod
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
88.9%
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Affected configurations
Node
phpbbimport_toolsMatch0.1.3
ORphpbbimport_toolsMatch0.1.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpbb:import_tools | phpbb import tools | eq | 0.1.3 |
| phpbb:import_tools | phpbb import tools | eq | 0.1.4 |
Related
cvelist
cvelist
CVE-2006-7147
2007-03-07 20:00:00
nvd
nvd
CVE-2006-7147
2007-03-07 20:19:00
nessus
nessus
phpBB Multiple Module phpbb_root_path Parameter Remote File Inclusion
2006-05-04 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
88.9%
Related for CVE-2006-7147