CVE-2006-3053

PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHORUMhttppath parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is checked on the very first line of...

CVE-2006-3053

PHORUM 5.1.13 and earlier suffer a PHP remote file inclusion via the PHORUM[http_path] parameter in common.php. The issue allows remote PHP code execution and is supported by multiple sources, which state the affected component is common.php and PHORUM 5.x series. The vendor disputes the existenc...