CVE-2006-5305 : PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and

PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Published 2006-10-17 15:07:00

Updated 2018-10-17 21:42:04

Source MITRE

View at NVD, CVE.org

Vulnerability category: File inclusion

Products affected by CVE-2006-5305

Phpbb » Lat2cyr
Versions up to, including, (<=) 1.0.1
cpe:2.3:a:phpbb:lat2cyr:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-5305

EPSS FAQ

11.23%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 95 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-5305

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.1	MEDIUM	AV:N/AC:H/Au:N/C:P/I:P/A:P	4.9	6.4	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2006-5305

Jump to

Vulnerability Details : CVE-2006-5305

Products affected by CVE-2006-5305

Exploit prediction scoring system (EPSS) score for CVE-2006-5305

CVSS scores for CVE-2006-5305

References for CVE-2006-5305