Vulnerabilities > CVE-2006-2151 - Unspecified vulnerability in PHPbb Group PHPbb Toplist

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
phpbb-group
exploit available
NVD
Published: 2006-05-03
Updated: 2024-11-21

Summary

PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter.

Vulnerable Configurations

Part Description Count
Application
Phpbb_Group
1

Exploit-Db

  • descriptionTopList <= 1.3.8 (phpBB Hack) Remote File Inclusion Vulnerability. CVE-2006-2151. Webapps exploit for php platform
    fileexploits/php/webapps/1722.txt
    idEDB-ID:1722
    last seen2016-01-31
    modified2006-04-27
    platformphp
    port
    published2006-04-27
    reporter[Oo]
    sourcehttps://www.exploit-db.com/download/1722/
    titleTopList <= 1.3.8 phpBB Hack Remote File Inclusion Vulnerability
    typewebapps
  • descriptionTopList <= 1.3.8 (phpBB Hack) Remote Inclusion Exploit. CVE-2006-2151. Webapps exploit for php platform
    fileexploits/php/webapps/1724.pl
    idEDB-ID:1724
    last seen2016-01-31
    modified2006-04-28
    platformphp
    port
    published2006-04-28
    reporterFOX_MULDER
    sourcehttps://www.exploit-db.com/download/1724/
    titleTopList <= 1.3.8 phpBB Hack Remote Inclusion Exploit
    typewebapps

References