CVE-2006-5305: Phpbb LAT2CYR

Medium severity, CVSS 5.1. EPSS: 3.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected products

• Phpbb LAT2CYR: up to and including 1.0.1

Published 2006-10-17. Last modified 2026-06-16.