CVE-2006-5301: Phpbb Spamblockermod

Medium severity, CVSS 6.8. EPSS: 5.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected products

• Phpbb Spamblockermod: up to and including 1.0.2; version 1.0 only; version 1.0.1 only

Published 2006-10-17. Last modified 2026-06-16.