Remote file inclusion

2006-05-1002:14:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.059 Low

EPSS

Percentile

93.5%

JSON

Multiple PHP remote file inclusion vulnerabilities in SpiffyJr phpRaid 2.9.5 through 3.0.b3 allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) auth.php and (2) auth_phpbb when the phpBB portal is enabled, and via a URL in the smf_root_path parameter in (3) auth.php and (4) auth_SMF when the SMF portal is enabled.

CPENameOperatorVersion
phpraideq3.0.0-b1
phpraideq3.0.0-b2
phpraideq3.0.0-b3
phpraideq2.9.5

Name	Operator	Version
phpraid	eq	3.0.0-b1
phpraid	eq	3.0.0-b2
phpraid	eq	3.0.0-b3
phpraid	eq	2.9.5

References

secunia.com/advisories/20027

securityreason.com/securityalert/865

www.osvdb.org/25358

www.securityfocus.com/archive/1/433252/100/0/threaded

www.securityfocus.com/archive/1/433253/100/0/threaded

www.securityfocus.com/bid/17875

www.vupen.com/english/advisories/2006/1726

exchange.xforce.ibmcloud.com/vulnerabilities/26346