CVE-2006-2675

PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters.

Published: May 30, 2006
Updated: Apr 13, 2023
CVE: CVE-2006-2675
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5.1
AV:N/AC:H/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
ubbcentral / ubb.threads	5.5.1	5.5.1.x
ubbcentral / ubb.threads	6.5	6.5.x
ubbcentral / ubb.threads	6.5.1	6.5.1.x
ubbcentral / ubb.threads	6.1	6.1.x
ubbcentral / ubb.threads	6.2.1	6.2.1.x
ubbcentral / ubb.threads	6.0.1	6.0.1.x
ubbcentral / ubb.threads	6.4.4	6.4.4.x
ubbcentral / ubb.threads	6.4.3	6.4.3.x
ubbcentral / ubb.threads	6.4.2	6.4.2.x
ubbcentral / ubb.threads	6.4.1	6.4.1.x
ubbcentral / ubb.threads	3.5	3.5.x
ubbcentral / ubb.threads	3.4	3.4.x
ubbcentral / ubb.threads	6.2.2	6.2.2.x
ubbcentral / ubb.threads	6.2	6.2.x
ubbcentral / ubb.threads	6.5.1.1	6.5.1.1.x
ubbcentral / ubb.threads	5.0	5.0.x
ubbcentral / ubb.threads	6.5.2	6.5.2.x
ubbcentral / ubb.threads	6.0.3	6.0.3.x
ubbcentral / ubb.threads	6.1.1	6.1.1.x
ubbcentral / ubb.threads	6.4	6.4.x
ubbcentral / ubb.threads	6.5.2_beta2	6.5.2_beta2.x
ubbcentral / ubb.threads	6.3.1	6.3.1.x
ubbcentral / ubb.threads	6.0.2	6.0.2.x
ubbcentral / ubb.threads	-	6.5.3.x
ubbcentral / ubb.threads	6.3	6.3.x
ubbcentral / ubb.threads	6.2.3	6.2.3.x
ubbcentral / ubb.threads	6.0	6.0.x

Vulnerability Database

CVE-2006-2675

Deep Security Visibility Without the Complexity