{"id":"CVE-2006-1994","aliases":["EUVD-2006-1994","GHSA-w7pf-6mr9-w9fp"],"status":"published","title":"PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to...","description":"PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUM_PATH parameter to (1) about.php, (2) admin.php, (3) anmelden.php, (4) losethread.php, (5) config.php, (6) delpost.php, (7) delthread.php, (8) dfcode.php, (9) download.php, (10) editanoc.php, (11) forum.php, (12) login.php, (13) makethread.php, (14) menu.php, (15) newthread.php, (16) openthread.php, (17) overview.php, (18) post.php, (19) suchen.php, (20) user.php, (21) userconfig.php, (22) userinfo.php, and (23) verwalten.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03516,"percentile":0.89301,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2006-04-25T10:00:00Z","modified":"2026-06-16T22:24:05Z","exploits":[{"source":"exploitdb","id":"EDB-1706","title":"dForum 1.5 - 'DFORUM_PATH' Multiple Remote File Inclusions","type":"webapps","platform":"php","date":"2006-04-21","verified":true,"url":"https://www.exploit-db.com/exploits/1706"}],"products":[{"vendor":"dforum","product":"dforum"}],"references":[{"url":"http://www.vupen.com/english/advisories/2006/1482","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/431758","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/19788","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045369.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26035","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.nukedx.com/?viewdoc=27","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/17650","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1994"},{"url":"https://github.com/advisories/GHSA-w7pf-6mr9-w9fp"}],"sources":{"cve":[{"id":"CVE-2006-1994","description":"PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUM_PATH parameter to (1) about.php, (2) admin.php, (3) anmelden.php, (4) losethread.php, (5) config.php, (6) delpost.php, (7) delthread.php, (8) dfcode.php, (9) download.php, (10) editanoc.php, (11) forum.php, (12) login.php, (13) makethread.php, (14) menu.php, (15) newthread.php, (16) openthread.php, (17) overview.php, (18) post.php, (19) suchen.php, (20) user.php, (21) userconfig.php, (22) userinfo.php, and (23) verwalten.php.","status":"published","published":"2006-04-25T10:00:00Z","modified":"2024-08-07T17:35:31.075Z","updated_at":"2026-11-02T14:33:52.224925Z"}],"euvd":[{"id":"EUVD-2006-1994","description":"PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUM_PATH parameter to (1) about.php, (2) admin.php, (3) anmelden.php, (4) losethread.php, (5) config.php, (6) delpost.php, (7) delthread.php, (8) dfcode.php, (9) download.php, (10) editanoc.php, (11) forum.php, (12) login.php, (13) makethread.php, (14) menu.php, (15) newthread.php, (16) openthread.php, (17) overview.php, (18) post.php, (19) suchen.php, (20) user.php, (21) userconfig.php, (22) userinfo.php, and (23) verwalten.php.","status":"published","published":"2006-04-25T10:00:00Z","modified":"2024-08-07T17:35:31Z","updated_at":"2026-11-03T01:16:02.676105Z"}],"ghsa":[{"id":"GHSA-w7pf-6mr9-w9fp","title":"PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to...","description":"PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUM_PATH parameter to (1) about.php, (2) admin.php, (3) anmelden.php, (4) losethread.php, (5) config.php, (6) delpost.php, (7) delthread.php, (8) dfcode.php, (9) download.php, (10) editanoc.php, (11) forum.php, (12) login.php, (13) makethread.php, (14) menu.php, (15) newthread.php, (16) openthread.php, (17) overview.php, (18) post.php, (19) suchen.php, (20) user.php, (21) userconfig.php, (22) userinfo.php, and (23) verwalten.php.","status":"published","published":"2022-05-01T06:54:51Z","modified":"2023-01-31T05:01:07Z","updated_at":"2026-11-02T14:48:00.068335Z"}],"nvd":[{"id":"CVE-2006-1994","description":"PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUM_PATH parameter to (1) about.php, (2) admin.php, (3) anmelden.php, (4) losethread.php, (5) config.php, (6) delpost.php, (7) delthread.php, (8) dfcode.php, (9) download.php, (10) editanoc.php, (11) forum.php, (12) login.php, (13) makethread.php, (14) menu.php, (15) newthread.php, (16) openthread.php, (17) overview.php, (18) post.php, (19) suchen.php, (20) user.php, (21) userconfig.php, (22) userinfo.php, and (23) verwalten.php.","status":"published","published":"2006-04-25T12:50:00Z","modified":"2026-06-16T22:24:05.807Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:02.433957Z"}]}}