Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2006-3735
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-3735

Description:
Multiple PHP remote file inclusion vulnerabilities in Mail2Forum (module for phpBB) 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the m2f_root_path parameter to (1) m2f/m2f_phpbb204.php, (2) m2f/m2f_forum.php, (3) m2f/m2f_mailinglist.php or (4) m2f/m2f_cron.php.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/27788

SAID
  Secunia Advisory: SA21083

OSVDB
  27355
  27356
  27354
  27357

MISC
  http://milw0rm.com/exploits/2019

BID
  19038


Return to the previous page.