Vulnerabilities > CVE-2006-4722 - Remote File Include vulnerability in Devsyn Open Bulletin Board

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
openbb
exploit available
NVD
Published: 2006-09-12
Updated: 2018-10-17

Summary

PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) index.php and possibly (2) collector.php.

Vulnerable Configurations

Part Description Count
Application
Openbb
7

Exploit-Db

descriptionOpen Bulletin Board <= 1.0.8 (root_path) File Include Vulnerability. CVE-2006-4722. Webapps exploit for php platform
idEDB-ID:2341
last seen2016-01-31
modified2006-09-10
published2006-09-10
reporterEddy_BAck0o
sourcehttps://www.exploit-db.com/download/2341/
titleOpen Bulletin Board <= 1.0.8 - root_path File Include Vulnerability

References