Lucene search
HistoryOct 18, 2006 - 7:07 p.m.
CVE-2006-5387
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.168
Percentile
96.1%
PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Affected configurations
Node
phpbb_plusxlplusxlMatch20.272
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpbb_plusxl | plusxl | 20.272 | cpe:2.3:a:phpbb_plusxl:plusxl:20.272:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-5387
2006-10-18 19:00:00
exploitdb
exploitdb
phpBB PlusXL 2.0_272 - 'constants.php' Remote File Inclusion
2006-10-13 00:00:00
cve
cve
CVE-2006-5387
2006-10-18 19:07:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.168
Percentile
96.1%
Related for NVD:CVE-2006-5387