CVE-2006-7090: Phpbb Security

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in phpbb_security.php in phpBB Security 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the php_root_path parameter.

Affected products

• Phpbb Security Phpbb Security: up to and including 1.0.1

Published 2007-03-02. Last modified 2026-06-16.