Lucene search

K
cve[email protected]CVE-2006-7208
HistoryJun 26, 2007 - 11:30 p.m.

CVE-2006-7208

2007-06-2623:30:00
CWE-20
web.nvd.nist.gov
77
php
remote file inclusion
vulnerability
com_forum
phpbb
mambo

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.0%

PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum) component (aka phpBB component) 1.2.4RC3 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected configurations

NVD
Node
adam_van_dongencom_forumMatch1.2.4rc3
OR
adam_van_dongenphpbb_componentMatch1.2.4rc3

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.0%

Related for CVE-2006-7208