CVE

Id
19157  
CVE No.
CVE-2006-3053  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHORUM[http_path] parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is checked on the very first line of non-comment code that it is not being called directly. It has been this way in all 5.x version of Phorum." CVE analysis concurs with the vendor.  
Phase
Assigned (20060616)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
170739 19157 CVE-2006-3053 BUGTRAQ:20060611 # MHG Security Team --- PHORUM 5.1.13 Remote File Inc.  View
170740 19157 CVE-2006-3053 URL:http://www.securityfocus.com/archive/1/archive/1/436863/100/0/threaded  View
170741 19157 CVE-2006-3053 BUGTRAQ:20060619 Re: # MHG Security Team --- PHORUM 5.1.13 Remote File Inc.  View
170742 19157 CVE-2006-3053 URL:http://www.securityfocus.com/archive/1/archive/1/437988/100/0/threaded  View
170743 19157 CVE-2006-3053 BID:16977  View
170744 19157 CVE-2006-3053 URL:http://www.securityfocus.com/bid/16977  View
170745 19157 CVE-2006-3053 SREASON:1103  View
170746 19157 CVE-2006-3053 URL:http://securityreason.com/securityalert/1103  View
170747 19157 CVE-2006-3053 XF:phorum-common-file-include(27064)  View

Related JVN