CVE-2006-7168

Опубликовано: 20 мар. 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Ссылки

http://securityreason.com/securityalert/2450
Exploit
Third Party Advisory
http://www.securityfocus.com/archive/1/448630/100/0/threaded
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/20516
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/29595
Third Party Advisory
VDB Entry
http://securityreason.com/securityalert/2450
Exploit
Third Party Advisory
http://www.securityfocus.com/archive/1/448630/100/0/threaded
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/20516
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/29595
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpbb:phpbb:-:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01389

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-gvch-5cf2-j8r7

github

почти 4 года назад