VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 14, 2006· Updated Jun 16, 2026

CVE-2006-1203

CVE-2006-1203

Description

PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the skin parameter to login.php, and possibly other parameters to other PHP scripts, related to include statements in common.php.

Affected products

2
  • Txtforum/Txtforumllm-fuzzy2 versions
    <=1.0.4-dev+ 1 more
    • (no CPE)range: <=1.0.4-dev
    • cpe:2.3:a:txtforum:txtforum:*:*:*:*:*:*:*:*range: <=1.0.4_dev

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.