CVE-2006-5610 - PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter

Back Back to CVE browser

CRITICAL

PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter

Published Oct 31, 2006

9.8

CRITICAL

CVSS 3.1

EPSS 1.36%

Description

PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (1)

http://secunia.com/advisories/22499
third-party-advisoryx_refsource_SECUNIAVendor Advisory

Link	Providers	Tags
http://secunia.com/advisories/22499		third-party-advisoryx_refsource_SECUNIAVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 31, 2006

Updated Apr 3, 2025

Reserved Oct 30, 2006

Link CVE-2006-5610

CISA Vulnrichment

Updated Apr 3, 2025

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-5610

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-5610