cbcvebase.
CVE-2006-3611
published 2006-07-18

CVE-2006-3611: Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal…

PriorityP427medium5.5CVSS 2.0
AVNACLAuSCPIPAN
EXPLOIT
EPSS
2.12%
79.6th percentile
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then included by pm.php.

Affected

62 ranges· showing 25
VendorProductVersion rangeFixed in
phorumphorum<= 5.1.14—
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
phorumphorum——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.