2416 matches found
CVE-2006-7147
PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-7148
PHP remote file inclusion vulnerability in includes/bbusagestats.php in maluinfo 206.2.38 for Brazilian PHPBB allows remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter. NOTE: this might be the same issues as CVE-2006-4893...
CVE-2006-7147
PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-7147
CVE-2006-7147 affects the phpBB Import Tools Mod 0.1.4 and earlier. The vulnerability is a PHP remote file inclusion via the phpbb_root_path parameter, allowing remote attackers to execute arbitrary PHP code. The root cause is insufficient sanitization of the phpbb_root_path input, enabling inclu...
CVE-2006-7148
Technical details for CVE-2006-7148 are not publicly available in the provided documents. Monitor for updates.
CVE-2006-7147: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-7100
PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Insert User 0.1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-7100
CVE-2006-7100 is a PHP remote file inclusion vulnerability in the phpBB Insert User extension (version 0.1.2 and earlier). The flaw resides in includes/functions_mod_user.php and allows remote attackers to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. Affected pr...
CVE-2006-7100
PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Insert User 0.1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-7100: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Insert User 0.1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-7076
Cross-site scripting XSS vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary web script or HTML via the entry parameter. NOTE: this issue might be resultant from SQL injection...
CVE-2006-7077
SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to execute arbitrary SQl commands via the entry parameter...
CVE-2006-7090
PHP remote file inclusion vulnerability in phpbbsecurity.php in phpBB Security 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phprootpath parameter...
phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: includeonce$phpbbrootpath...
Extreme phpBB 3.0.1 (functions.php) Remote File Include Exploit
No description provided by source. C xoron Name: phpBB Extreme 3.0.1 phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=95900 Tesekkurler: pang0, DJR POC:...
CVE-2006-7090: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in phpbbsecurity.php in phpBB Security 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phprootpath parameter...
CVE-2006-7090
PHP remote file inclusion vulnerability in phpbbsecurity.php in phpBB Security 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phprootpath parameter...
CVE-2006-7090
The CVE-2006-7090 entry concerns phpBB Security (the phpbb_security.php component) in version 1.0.1 and earlier. The vulnerability is a PHP Remote File Inclusion via a tainted php_root_path parameter, enabling remote attackers to execute arbitrary PHP code on affected systems. Documents explicitl...
CVE-2006-7076
CVE-2006-7076 affects Advanced Guestbook 2.4 for phpBB, with a cross-site scripting flaw in guestbook.php that lets remote attackers inject arbitrary script or HTML via the entry parameter. The issue is identified as XSS and notes indicate it might originate from SQL injection. Documented impact ...