CVE-2006-5610

9.8 criticalEPSS 1.4%

Critical (9.8) in fully modded phpbb fully modded phpbb. EPSS 1.4% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2006-10-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

fully_modded_phpbb:fully_modded_phpbb

References

http://secunia.com/advisories/22499
http://secunia.com/advisories/22499

Check your stack JSON