{ "schema_version": "1.4.0", "id": "GHSA-fq34-vcp4-h3rh", "modified": "2025-04-09T03:31:59Z", "published": "2022-05-01T07:25:55Z", "aliases": [ "CVE-2006-5191" ], "details": "PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-5191" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29347" }, { "type": "WEB", "url": "https://www.exploit-db.com/exploits/2477" }, { "type": "WEB", "url": "http://secunia.com/advisories/22269" }, { "type": "WEB", "url": "http://www.nivisec.com/article.php?l=vi&ar=20" }, { "type": "WEB", "url": "http://www.osvdb.org/29506" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/20353" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2006/3916" } ], "database_specific": { "cwe_ids": [ "CWE-94" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2006-10-10T04:06:00Z" } }