CVE-2006-4893

CVE-2006-4893 impacts the phpBB XS project (v0.58 and earlier). The vulnerable component is the file system access in the bb_usage_stats.php (path: bb_usage_stats/includes/bb_usage_stats.php) where a PHP remote file inclusion flaw allows an attacker to supply a URL via the phpbb_root_path paramet...

CVE-2006-4780

CVE-2006-4780 affects phpBB XS 0.58 and earlier. The vulnerability is a PHP remote file inclusion in includes/functions.php that allows an attacker to execute arbitrary PHP code by supplying a crafted URL via the phpbb_root_path parameter. This is a server-side code injection impacting systems ru...