CVE-2006-5312: High severity phpBB Ajax Shoutbox vulnerability
Published Oct 17, 2006
·Updated
PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter.
Affected Software
1 affected component
phpBB Ajax Shoutbox<=0.0.5
Event History
Oct 17, 2006
CVE Published
04:07 PM
Data Sourced
via NVD·04:07 PM
DescriptionSeverityAffected Software
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5312?
CVE-2006-5312 is considered to have a critical severity level due to the potential for remote code execution.
2
How do I fix CVE-2006-5312?
To fix CVE-2006-5312, you should upgrade to a version of Ajax Shoutbox later than 0.0.5 that mitigates this vulnerability.
3
What software is affected by CVE-2006-5312?
CVE-2006-5312 affects Ajax Shoutbox versions 0.0.5 and earlier, used with phpBB.
4
What type of vulnerability is CVE-2006-5312?
CVE-2006-5312 is a remote file inclusion vulnerability that allows attackers to execute arbitrary PHP code.
5
Can I exploit CVE-2006-5312 remotely?
Yes, CVE-2006-5312 can be exploited remotely by manipulating the phpbb_root_path parameter.