CVE-2006-7147: PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute…

PriorityP344medium6.8CVSS 2.0

AVNACMAuNCPIPAP

EXPLOIT

EPSS

4.27%

89.9th percentile

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
phpbb	import_tools	—	—
phpbb	import_tools	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.