CVE

Id
18000  
CVE No.
CVE-2006-1896  
Status
Candidate  
Description
Unspecified vulnerability in phpBB allows remote authenticated users with Administration Panel access to execute arbitrary PHP code via crafted Font Colour 3 ($theme[fontcolor3] variable) and/or signature values, possibly involving the highlight functionality. NOTE: the original report does not clarify whether this issue is static code injection, eval injection, or another type of vulnerability.  
Phase
Assigned (20060420)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
153918 18000 CVE-2006-1896 BUGTRAQ:20060414 phpBB Admin command execution  View
153919 18000 CVE-2006-1896 URL:http://www.securityfocus.com/archive/1/archive/1/431015/100/0/threaded  View
153920 18000 CVE-2006-1896 BUGTRAQ:20060418 Re: phpBB Admin command execution  View
153921 18000 CVE-2006-1896 URL:http://www.securityfocus.com/archive/1/archive/1/431387/100/0/threaded  View
153922 18000 CVE-2006-1896 DEBIAN:DSA-1066  View
153923 18000 CVE-2006-1896 URL:http://www.debian.org/security/2006/dsa-1066  View
153924 18000 CVE-2006-1896 SECUNIA:20197  View
153925 18000 CVE-2006-1896 URL:http://secunia.com/advisories/20197  View
153926 18000 CVE-2006-1896 SECUNIA:20093  View
153927 18000 CVE-2006-1896 URL:http://secunia.com/advisories/20093  View
153928 18000 CVE-2006-1896 SREASON:715  View
153929 18000 CVE-2006-1896 URL:http://securityreason.com/securityalert/715  View
153930 18000 CVE-2006-1896 SREASON:762  View
153931 18000 CVE-2006-1896 URL:http://securityreason.com/securityalert/762  View
153932 18000 CVE-2006-1896 XF:phpbb-admin-code-execution(25889)  View

Related JVN