Unrated severityNVD Advisory· Published Sep 25, 2006· Updated Jun 16, 2026

CVE-2006-4968

Description

PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Warpspeed/Pnphpbb2 versions
cpe:2.3:a:postnuke_software_foundation:pnphpbb:1.2g:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:postnuke_software_foundation:pnphpbb:1.2g:*:*:*:*:*:*:*
- (no CPE)range: = 1.2g

Patches

Vulnerability mechanics

References

noc.postnuke.com/frs/download.php/1094/patch_1.2g-1.2i.diff.gznvdPatch
www.securityfocus.com/bid/20097nvdExploit
securitytracker.com/idnvd
www.securityfocus.com/archive/1/446267/100/0/threadednvd
www.securityfocus.com/archive/1/446568/100/0/threadednvd
www.securityfocus.com/archive/1/446617nvd
www.vupen.com/english/advisories/2006/3671nvd
exchange.xforce.ibmcloud.com/vulnerabilities/29014nvd
www.exploit-db.com/exploits/2390nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.008
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000