Vulnerabilities > CVE-2006-3053 - Unspecified vulnerability in Phorum

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

phorum

exploit available

NVD

Published: 2006-06-16

Updated: 2024-04-11

Summary

PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHORUM[http_path] parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is checked on the very first line of non-comment code that it is not being called directly. It has been this way in all 5.x version of Phorum." CVE analysis concurs with the vendor

Vulnerable Configurations

Part	Description	Count
Application	Phorum Phorum Phorum 3.2.2 Phorum Phorum 3.1.1_Pre Phorum Phorum 3.4.6 Phorum Phorum 3.2.3 Phorum Phorum 5.0.15A Phorum Phorum 3.2.7 Phorum Phorum 3.4.3 Phorum Phorum 3.1.1 Phorum Phorum 3.2.8 Phorum Phorum 3.3.1A Phorum Phorum 3.4.4 Phorum Phorum 5.0.17A Phorum Phorum 3.3.1 Phorum Phorum 3.4 Phorum Phorum 3.3.2 Phorum Phorum 3.1.1_Rc2 Phorum Phorum 5.0.18 Phorum Phorum 3.1.1A Phorum Phorum 3.4.5 Phorum Phorum 5.0.12 Phorum Phorum 3.4.8A Phorum Phorum 3.2.5 Phorum Phorum 3.2.3A Phorum Phorum 3.2 Phorum Phorum 5.0.16 Phorum Phorum 5.0.10 Phorum Phorum 3.1.2 Phorum Phorum 5.0.11 Phorum Phorum - Phorum Phorum 3.0.7 Phorum Phorum 3.1 Phorum Phorum 3.2.4 Phorum Phorum 3.2.6 Phorum Phorum 3.2.11 Phorum Phorum 3.4.1 Phorum Phorum 3.4.2 Phorum Phorum 3.4.7 Phorum Phorum 3.4.8 Phorum Phorum 4.3.7 Phorum Phorum 5.0.0 Phorum Phorum 5.0.1 Phorum Phorum 5.0.2 Phorum Phorum 5.0.3 Phorum Phorum 5.0.4 Phorum Phorum 5.0.5 Phorum Phorum 5.0.6 Phorum Phorum 5.0.7 Phorum Phorum 5.0.8 Phorum Phorum 5.0.9 Phorum Phorum 5.0.13 Phorum Phorum 5.0.14 Phorum Phorum 5.0.15 Phorum Phorum 5.0.17 Phorum Phorum 5.0.19 Phorum Phorum 5.0.20 Phorum Phorum 5.1.13 Phorum Phorum 5.0.7_Beta Phorum Phorum 5.0.3_Beta Phorum Phorum 3.2.3B Phorum Phorum 3.3.2B3 Phorum Phorum 3.3.2A	76

Exploit-Db

description	PHORUM 3.x/5.x Common.PHP Remote File Include Vulnerability. CVE-2006-3053. Webapps exploit for php platform
id	EDB-ID:27363
last seen	2016-02-03
modified	2006-03-06
published	2006-03-06
reporter	ERNE
source	https://www.exploit-db.com/download/27363/
title	PHORUM 3.x/5.x Common.PHP Remote File Include Vulnerability

Summary

Vulnerable Configurations

Exploit-Db

References