Lucene search

K
cve[email protected]CVE-2006-7174
HistoryMar 21, 2007 - 9:19 p.m.

CVE-2006-7174

2007-03-2121:19:00
web.nvd.nist.gov
22
cve-2006-7174
phpbb
dimension module
php
remote file inclusion
vulnerability
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.4%

PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: this may be the same issue as CVE-2006-5235.

Affected configurations

NVD
Node
phpbbdimension
CPENameOperatorVersion
phpbb:dimensionphpbb dimensioneq*

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.4%

Related for CVE-2006-7174