Unscored severity · published Oct 17, 2006
CVE-2006-5306
Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php, or (3) includes/journals_edit.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Journals System Module · Phpbb
through 1.0.2_rc2; 1.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5306
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5306
Vendor Advisory
http://secunia.com/advisories/22387
securityreason.com
http://securityreason.com/securityalert/1731
Exploit
http://securitytracker.com/id?1017058
www.securityfocus.com
http://www.securityfocus.com/archive/1/448443/100/0/threaded
Exploit
http://www.securityfocus.com/bid/20484
www.vupen.com
http://www.vupen.com/english/advisories/2006/4029