CVE-2006-5735

no score yetEPSS 14%

punbb punbb: no CVSS score yet. EPSS 14% chance of exploitation in the next 30 days.

Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the language parameter, related to register.php storing a language value in the users table.

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2006-11-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

punbb:punbb

References

http://secunia.com/advisories/22622
http://securityreason.com/securityalert/1824
http://securitytracker.com/id?1017131
http://www.osvdb.org/30132
http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt

Check your stack JSON