CVE-2006-5385

PHP remote file inclusion vulnerability in admin/adminspam.php in the SpamOborona 1.0b and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5385

The CVE-2006-5385 entry documents a PHP remote file inclusion vulnerability in the SpamOborona 1.0b (older) phpBB module, specifically in admin/admin_spam.php. The root cause is that the phpbb_root_path parameter can be supplied via a URL, allowing an attacker to load and execute arbitrary PHP co...