CVE-2004-1535 PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to referenc...
HighCVSS 7.5
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb group phpbb | = 2.0.0 | No fix listed |
| phpbb group phpbb | = 2.0.1 | No fix listed |
| phpbb group phpbb | = 2.0.2 | No fix listed |
| phpbb group phpbb | = 2.0.3 | No fix listed |
| phpbb group phpbb | = 2.0.4 | No fix listed |
| phpbb group phpbb | = 2.0.5 | No fix listed |
| phpbb group phpbb | = 2.0.6 | No fix listed |
| phpbb group phpbb | = 2.0.7 | No fix listed |
| phpbb group phpbb | = 2.0.8 | No fix listed |
| phpbb group phpbb | = 2.0.9 | No fix listed |
| phpbb group phpbb | = 2.0.10 | No fix listed |
| phpbb group phpbb | = rc1 | No fix listed |
| phpbb group phpbb | = rc1_pre | No fix listed |
| phpbb group phpbb | = rc2 | No fix listed |
| phpbb group phpbb | = rc3 | No fix listed |
| phpbb group phpbb | = rc4 | No fix listed |