CVE-2006-5305: Medium severity phpBB lat2cyr vulnerability
Published Oct 17, 2006
·Updated
PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter.
Affected Software
1 affected component
phpBB lat2cyr<=1.0.1
Event History
Oct 17, 2006
CVE Published
03:07 PM
Data Sourced
via NVD·03:07 PM
DescriptionSeverityAffected Software
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5305?
CVE-2006-5305 is considered a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2006-5305?
To fix CVE-2006-5305, update the lat2cyr phpbb module to version 1.0.2 or later.
3
What types of attacks can exploit CVE-2006-5305?
CVE-2006-5305 can be exploited by attackers to execute arbitrary PHP code on the server through unvalidated user inputs.
4
Which software versions are affected by CVE-2006-5305?
CVE-2006-5305 affects lat2cyr phpbb module version 1.0.1 and earlier.
5
Is CVE-2006-5305 still a relevant threat today?
While CVE-2006-5305 is an older vulnerability, unpatched systems may still be susceptible to its exploitation.