CVE-2006-5526

CVE-2006-3045 (and its cross-referenced entry CVE-2006-5526) describe a PHP remote file inclusion vulnerability in Foing. The affected component is manage_songs.php, in Foing 0.7.0e and earlier, where an attacker can supply a URL via foing_root_path to execute arbitrary PHP code. This is a remote...

CVE-2006-5610

CVE-2006-5610 describes a PHP remote file inclusion in Teake Nutma Foing’s codebase, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, enabling an attacker to execute arbitrary PHP code via a URL supplied to the phpbb_root_path parameter in the file player/includes/common.php . The vulnerabi...

CVE-2008-1350

CVE-2008-1350 is a SQL injection vulnerability in the PHPBB mod Fully Modded phpBB (phpbbfm) 80220 . The flaw resides in the file kb.php and is exploitable via the k parameter in an article action, allowing remote attackers to execute arbitrary SQL commands. Primary sources describe the vulnerabi...