NVD

Id
63909  
Name
CVE-2006-5306  
Description
Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php, or (3) includes/journals_edit.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-17  
Modified Date
2011-03-07  
Seq
2006-5306  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333123 63909 CVE-2006-5306 2522  View
333124 63909 CVE-2006-5306 1731  View
333125 63909 CVE-2006-5306 1017058  View
333126 63909 CVE-2006-5306 20061012 Journals System <= 1.0.2 [RC2] Remote File Include Vulnerability  View
333127 63909 CVE-2006-5306 20484  View
333128 63909 CVE-2006-5306 ADV-2006-4029  View
333129 63909 CVE-2006-5306 phpbb-multiple-scripts-file-include(29491)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61032 JVNDB-2006-003298 phpBB 用の Journals System モジュールにおける PHP リモートファイルインクルージョンの脆弱性 phpBB 用の Journals System モジュールには、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5306 21408 CVE-2006-5306 63909 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003298.html 2006-10-17 2012-12-20 View