CVE-2006-1896

2006-04-2000:00:00

ubuntu.com

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.3%

JSON

Unspecified vulnerability in phpBB allows remote authenticated users with
Administration Panel access to execute arbitrary PHP code via crafted Font
Colour 3 ($theme[fontcolor3] variable) and/or signature values, possibly
involving the highlight functionality. NOTE: the original report does not
clarify whether this issue is static code injection, eval injection, or
another type of vulnerability.

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchphpbb2< 2.0.21-3UNKNOWN
ubuntu7.04noarchphpbb2< 2.0.21-3UNKNOWN
ubuntu7.10noarchphpbb2< 2.0.21-3UNKNOWN
ubuntu8.04noarchphpbb2< 2.0.21-3UNKNOWN
ubuntu8.10noarchphpbb2< 2.0.21-3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.10	noarch	phpbb2	< 2.0.21-3	UNKNOWN
ubuntu	7.04	noarch	phpbb2	< 2.0.21-3	UNKNOWN
ubuntu	7.10	noarch	phpbb2	< 2.0.21-3	UNKNOWN
ubuntu	8.04	noarch	phpbb2	< 2.0.21-3	UNKNOWN
ubuntu	8.10	noarch	phpbb2	< 2.0.21-3	UNKNOWN