CVE-2006-3053

PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the…

published June 16, 2006

CVSS
—
EPSS
3%
Percentile
86.8
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHORUM[http_path] parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is checked on the very first line of non-comment code that it is not being called directly. It has been this way in all 5.x version of Phorum." CVE analysis concurs with the vendor

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02888 · 86.8th percentile
Published
2006-06-16T10:00Z
EPSS history
Timeline
  • 16 JUN 10:00Z
    PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the…
    cvelistv5