cbcvebase.
CVE-2006-2865
published 2006-06-06

CVE-2006-2865: PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE…

PriorityP336high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.77%
84.5th percentile
PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod

Affected

30 ranges· showing 25
VendorProductVersion rangeFixed in
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
phpbb_groupphpbb——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.