CVE-2006-5305 - PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter

Back Back to CVE browser

MEDIUM

PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter

Published Oct 17, 2006

5.1

MEDIUM

CVSS 2.0

EPSS 3.12%

Description

PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://secunia.com/advisories/22432
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1729
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/448660/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20513
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4050
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/29572
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2546
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/22432		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1729		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/448660/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20513		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4050		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/29572		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2546		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 17, 2006

Updated Aug 7, 2024

Reserved Oct 17, 2006

Link CVE-2006-5305

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-5305

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-5305