Search/CVE-2006-5306
● CVE

CVE-2006-5306

VendorphpbbProductjournals system moduleDiscoveredOct 17, 2006UpdatedApr 23, 2026

Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php, or (3) includes/journals_edit.php.

View graph Watch Export
CVSS v3.1
—
EPSS
3.05%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 15, 2026
● 0.01pp
3.04% → 3.05% over 2 tracked changes
Connections
2 relationships
Timeline
disclosure → media coverage
Oct 17, 2006
Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026