CVE-2006-2152 PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via th...
HighCVSS 7.5
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb group phpbb advanced guestbook | <= 2.4.0 | No fix listed |
References
- 19905 third-party-advisory vendor-advisory
- 17745 vdb-entry
- ADV-2006-1600 vdb-entry
- adv-guestbook-addentry-file-include(26217) vdb-entry
- 1723 exploit
- 1725 exploit