3 matches found
CVE-2006-5526
CVE-2006-3045 (and its cross-referenced entry CVE-2006-5526) describe a PHP remote file inclusion vulnerability in Foing. The affected component is manage_songs.php, in Foing 0.7.0e and earlier, where an attacker can supply a URL via foing_root_path to execute arbitrary PHP code. This is a remote...
CVE-2006-5610
A PHP remote file inclusion vulnerability exists in the player/includes/common.php file of Teake Nutma Foing , specifically as modified in Fully Modded phpBB (phpbbfm) 2021.4.40 . This flaw allows remote attackers to execute arbitrary PHP code by providing a malicious URL via the phpbb_root_path ...
CVE-2008-1350
CVE-2008-1350 is a SQL injection vulnerability in the PHPBB mod Fully Modded phpBB (phpbbfm) 80220 . The flaw resides in the file kb.php and is exploitable via the k parameter in an article action, allowing remote attackers to execute arbitrary SQL commands. Primary sources describe the vulnerabi...