CVE-2006-5235

The CVE-2006-5235 entry describes a PHP remote file inclusion (RFI) in Dimension of phpBB (0.2.6 and earlier) via the phpbb_root_path parameter, allowing an attacker to execute arbitrary PHP code. Related records (CVE-2006-7174) describe the same issue in the Dimension module’s includes/functions...