Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2004-1535 — Group Phpbb vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
2.2%
top 15.43%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Phpbb Group Phpbb
Timeline
PublishedDec 31
Latest updateApr 29

Description

PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the code.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDphpbb_group/phpbb16 versions+15

🔴Vulnerability Details

1
GHSA
GHSA-4pj9-m96x-crhq: PHP remote file inclusion vulnerability in admin_cash↗2022-04-29
▶

💥Exploits & PoCs

1
Exploit-DB
phpBB 2.0.x - 'admin_cash.php' PHP Remote File Inclusion↗2004-11-17
▶