CVE-2006-5312 - PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter

Published Oct 17, 2006

7.5

HIGH

CVSS 2.0

EPSS 2.22%

Description

PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/29510
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2532
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/29510		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2532		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 17, 2006

Updated Aug 7, 2024

Reserved Oct 17, 2006

Link CVE-2006-5312

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-5312

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-5312