CVE-2006-5284

Name of the Vulnerable Software and Affected Versions pnews versions 2.6.4 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the CFG[auth phpbb path] parameter in the auth/phpbb.inc.php file. This can be exploited by providing a malicious URL.

Recommendations For versions 2.6.4 and earlier, consider disabling the CFG[auth phpbb path] parameter or restricting its use to minimize the risk of exploitation until a fix is available.