Vulnerabilities > CVE-2006-5083 - Remote Security vulnerability in Importal

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

phpbb-security

exploit available

NVD

Published: 2006-09-29

Updated: 2017-10-19

Summary

PHP remote file inclusion vulnerability in includes/functions_portal.php in Integrated MODs (IM) Portal 1.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Vulnerable Configurations

Part	Description	Count
Application	Phpbb_Security Phpbb Security Importal *	1

Exploit-Db

id	EDB-ID:2430

References

http://secunia.com/advisories/22113
http://www.securityfocus.com/bid/84255
http://www.vupen.com/english/advisories/2006/3774
https://exchange.xforce.ibmcloud.com/vulnerabilities/29146
https://www.exploit-db.com/exploits/2430