CVE-2006-5191: Code Injection
Published Oct 6, 2006
·Updated
PHP remote file inclusion vulnerability in includes/functionsstatictopics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter.
Affected Software
1 affected component
phpBB phpbb<=1.0
Event History
Oct 6, 2006
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Oct 10, 2006
Data Sourced
via NVD·04:06 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-5191?
CVE-2006-5191 is considered a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2006-5191?
To fix CVE-2006-5191, upgrade to a version of phpBB newer than 1.0 that does not contain this vulnerability.
3
What kind of attacks are possible with CVE-2006-5191?
CVE-2006-5191 allows remote attackers to execute arbitrary PHP code on the server.
4
Who is affected by CVE-2006-5191?
Users of phpBB 1.0 and earlier versions utilizing the Nivisec Static Topics module are affected by CVE-2006-5191.
5
What is the cause of CVE-2006-5191?
CVE-2006-5191 is caused by improper validation of user-supplied input in the phpbb_root_path parameter.