CVE-2006-3955

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 news.php, 2 search.php, or 3 whosOnline.php...

CVE-2006-3955

CVE-2006-3955 affects MiniBB Forum 1.5a. The issue is multiple PHP remote file inclusion vulnerabilities allowing an attacker to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) news.php, (2) search.php, or (3) whosOnline.php. The CVSSv2 base score is 7.5 (HIGH) with net...