Skip to main content
← All vulnerabilities
CVE-2006-2245

PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbit

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-1747

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 7

vupen.com

secunia.com

osvdb.org

exchange.xforce.ibmcloud.com

pridels0.blogspot.com

securityfocus.com

Exploit-DB