Vulnerabilities > CVE-2006-3955 - Remote File Include vulnerability in Minibb 1.5A

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
minibb
exploit available
NVD
Published: 2006-08-01
Updated: 2018-10-17

Summary

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) news.php, (2) search.php, or (3) whosOnline.php.

Vulnerable Configurations

Part Description Count
Application
Minibb
1

Exploit-Db

descriptionMiniBB 1.5 News.PHP Remote File Include Vulnerability. CVE-2006-3955. Webapps exploit for php platform
idEDB-ID:28251
last seen2016-02-03
modified2006-07-20
published2006-07-20
reporterAG-Spider
sourcehttps://www.exploit-db.com/download/28251/
titleMiniBB 1.5 News.PHP Remote File Include Vulnerability

References