← Vulnerability feed

Vulnerability record · CVE-2006-2152 · published 3 May 2006

CVE-2006-2152: Phpbb group phpbb advanced guestbook vulnerability

Phpbb Group · Phpbb Advanced Guestbook

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter.

7.5 CVSS 2.0 High EPSS 8.3% · top 5.2%
7.5CVSS 2.0 base score
8.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/19905 Vendor Advisory
http://www.securityfocus.com/bid/17745
http://www.vupen.com/english/advisories/2006/1600
https://exchange.xforce.ibmcloud.com/vulnerabilities/26217
https://www.exploit-db.com/exploits/1723
https://www.exploit-db.com/exploits/1725
http://secunia.com/advisories/19905 Vendor Advisory
http://www.securityfocus.com/bid/17745
http://www.vupen.com/english/advisories/2006/1600
https://exchange.xforce.ibmcloud.com/vulnerabilities/26217
https://www.exploit-db.com/exploits/1723
https://www.exploit-db.com/exploits/1725

Track CVE-2006-2152 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.8CVE-2006-7077Phpbb group phpbb advanced guestbook vulnerabilitySQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to execute arbitrary SQl commands via the en…EPSS 1.2%4.3CVE-2006-7076Phpbb group phpbb advanced guestbook vulnerabilityCross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary web script …EPSS 1.0%

Source: NIST National Vulnerability Database (record CVE-2006-2152), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.