Lucene search
PRIOn knowledge basePRION:CVE-2006-1896HistoryApr 20, 2006 - 10:02 a.m.
Code injection
2006-04-2010:02:00
PRIOn knowledge base
www.prio-n.com
2
Unspecified vulnerability in phpBB allows remote authenticated users with Administration Panel access to execute arbitrary PHP code via crafted Font Colour 3 ($theme[fontcolor3] variable) and/or signature values, possibly involving the highlight functionality. NOTE: the original report does not clarify whether this issue is static code injection, eval injection, or another type of vulnerability.
References
secunia.com/advisories/20093
secunia.com/advisories/20197
securityreason.com/securityalert/715
securityreason.com/securityalert/762
www.debian.org/security/2006/dsa-1066
www.securityfocus.com/archive/1/431015/100/0/threaded
www.securityfocus.com/archive/1/431387/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/25889
Related
debian
debian
ubuntucve
ubuntucve
CVE-2006-1896
2006-04-20 00:00:00
nvd
nvd
CVE-2006-1896
2006-04-20 10:02:00
cve
cve
CVE-2006-1896
2006-04-20 10:02:00
osv
osv
phpbb2 - missing input sanitising
2006-05-20 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1066-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 1066-1 (phpbb2)
2008-01-17 00:00:00
cvelist
cvelist
CVE-2006-1896
2006-04-20 10:00:00
nessus
nessus
Debian DSA-1066-1 : phpbb2 - missing input sanitising
2006-10-14 00:00:00