CVE-2006-7208

CVE-2006-7208 is a PHP remote file inclusion vulnerability in the Mambo-based phpBB component (com_forum) used by Adam van Dongen Forum, affecting version 1.2.4RC3 and earlier. The root cause is inadequate sanitization of the phpbb_root_path parameter in download.php (and related scripts), allowi...