Vulnerability in Phorum

CVE-2006-6550

PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the db_file parameter. NOTE: CVE disputes this vulnerability because db_file is defined before use

EPSS: 0.021 (80.1th percentile) — read the EPSS interpretation.

Affected products

  • Phorum — versions 3.2.11
  • N/a — versions n/a

References