CVE-2006-7208: Adam Van Dongen Com Forum

Medium severity, CVSS 6.8. EPSS: 5.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum (com_forum) component (aka phpBB component) 1.2.4RC3 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Affected products

• Adam Van Dongen Com Forum: version 1.2.4rc3 only
• Adam Van Dongen Phpbb Component: version 1.2.4rc3 only

Published 2007-06-26. Last modified 2026-06-16.