Vulnerabilities > CVE-2006-2865 - Unspecified vulnerability in PHPbb Group PHPbb

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

phpbb-group

exploit available

NVD

Published: 2006-06-06

Updated: 2024-04-11

Summary

PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod

Vulnerable Configurations

Part	Description	Count
Application	Phpbb_Group Phpbb Group Phpbb 2.0.5 Phpbb Group Phpbb 2.0.7A Phpbb Group Phpbb 2.0.20 Phpbb Group Phpbb 2.0.8 Phpbb Group Phpbb 2.0.11 Phpbb Group Phpbb 2.0.1 Phpbb Group Phpbb 2.0.13 Phpbb Group Phpbb 2.0.16 Phpbb Group Phpbb 2.0.3 Phpbb Group Phpbb 2.0_Rc2 Phpbb Group Phpbb 2.0 Phpbb Group Phpbb 2.0_Rc1 Phpbb Group Phpbb 2.0.19 Phpbb Group Phpbb 2.0.4 Phpbb Group Phpbb 2.0.12 Phpbb Group Phpbb 2.0.9 Phpbb Group Phpbb 2.0.7 Phpbb Group Phpbb 2.0.8A Phpbb Group Phpbb 2.0.6D Phpbb Group Phpbb 2.0.2 Phpbb Group Phpbb 2.0.14 Phpbb Group Phpbb 2.0.10 Phpbb Group Phpbb 2.0.6C Phpbb Group Phpbb 2.0.15 Phpbb Group Phpbb 2.0_Rc4 Phpbb Group Phpbb 2.0.6 Phpbb Group Phpbb 2.0.17 Phpbb Group Phpbb 2.0_Rc3 Phpbb Group Phpbb 2.0.18 Phpbb Group Phpbb 2.0_Beta1	30

Exploit-Db

description	PHPBB 2.0.x Template.PHP Remote File Include Vulnerability. CVE-2006-2865. Webapps exploit for php platform
id	EDB-ID:27961
last seen	2016-02-03
modified	2006-06-02
published	2006-06-02
reporter	Canberx
source	https://www.exploit-db.com/download/27961/
title	PHPBB 2.0.x Template.PHP Remote File Include Vulnerability

Summary

Vulnerable Configurations

Exploit-Db

References