CVE-2006-5385

PHP remote file inclusion vulnerability in admin/adminspam.php in the SpamOborona 1.0b and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5385

The CVE-2006-5385 entry documents a PHP remote file inclusion vulnerability in the SpamOborona 1.0b (older) phpBB module, specifically in admin/admin_spam.php. The root cause is that the phpbb_root_path parameter can be supplied via a URL, allowing an attacker to load and execute arbitrary PHP co...

phpBB SpamOborona Mod 1.0b - Remote File Inclusion

!/usr/bin/perl SpamOborona PHPBB Plugin Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://spamoborona.net/down...