cve/2006/CVE-2006-2739.md

CVE-2006-2739

Description

PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the tinybb_footers parameter.

POC

Reference

• http://www.nukedx.com/?getxpl=33
• http://www.nukedx.com/?getxpl=33
• http://www.nukedx.com/?viewdoc=33
• http://www.nukedx.com/?viewdoc=33

Github

No PoCs found on GitHub currently.