Vulnerabilities > CVE-2006-2675 - Remote Security vulnerability in UBB.threads

CVSS 5.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

high complexity

ubbcentral

exploit available

NVD

Published: 2006-05-30

Updated: 2018-10-18

Summary

PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters. Successful exploitation requires that "register_globals" is enabled.

Vulnerable Configurations

Part	Description	Count
Application	Ubbcentral Ubbcentral Ubb.Threads 3.4 Ubbcentral Ubb.Threads 3.5 Ubbcentral Ubb.Threads 5.0 Ubbcentral Ubb.Threads 5.5.1 Ubbcentral Ubb.Threads 6.0 Ubbcentral Ubb.Threads 6.0.1 Ubbcentral Ubb.Threads 6.0.2 Ubbcentral Ubb.Threads 6.0.3 Ubbcentral Ubb.Threads 6.1 Ubbcentral Ubb.Threads 6.1.1 Ubbcentral Ubb.Threads 6.2 Ubbcentral Ubb.Threads 6.2.1 Ubbcentral Ubb.Threads 6.2.2 Ubbcentral Ubb.Threads 6.2.3 Ubbcentral Ubb.Threads 6.3 Ubbcentral Ubb.Threads 6.3.1 Ubbcentral Ubb.Threads 6.4 Ubbcentral Ubb.Threads 6.4.1 Ubbcentral Ubb.Threads 6.4.2 Ubbcentral Ubb.Threads 6.4.3 Ubbcentral Ubb.Threads 6.4.4 Ubbcentral Ubb.Threads 6.5 Ubbcentral Ubb.Threads 6.5.1 Ubbcentral Ubb.Threads 6.5.1.1 Ubbcentral Ubb.Threads 6.5.2 Ubbcentral Ubb.Threads 6.5.2_Beta2 Ubbcentral Ubb.Threads *	27

Exploit-Db

description	UBB Threads 5.x / 6.x Multiple Remote File Inclusion Vulnerabilities. CVE-2006-2675,CVE-2006-2755. Webapps exploit for php platform
id	EDB-ID:1843
last seen	2016-01-31
modified	2006-05-28
published	2006-05-28
reporter	nukedx
source	https://www.exploit-db.com/download/1843/
title	UBB Threads 5.x / 6.x - Multiple Remote File Inclusion Vulnerabilities

Summary

Vulnerable Configurations

Exploit-Db

References