📦

journals_system_module

Vendor: phpbb

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 1 Remote Access
Total CVEs 3 Total Indexed
Avg. EPSS 3.04% Exploit Prob.
Latest CVE CVE-2006-5306 Oct 17

Security Vulnerability Index

Page 1 / 1
6.8 CVSS
CVE-2006-5306
RCE Exploit Found

Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php, or (3) includes/journals_edit.php.

EPSS: 3.04%