CVE-2006-2865

PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod

• http://www.securityfocus.com/archive/1/435869/100/0/threaded
• http://www.securityfocus.com/archive/1/435978/100/0/threadedExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/435995/100/0/threadedExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/436118/100/0/threaded
• http://www.securityfocus.com/bid/18255Exploit
• http://www.securityfocus.com/archive/1/435869/100/0/threaded
• http://www.securityfocus.com/archive/1/435978/100/0/threadedExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/435995/100/0/threadedExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/436118/100/0/threaded
• http://www.securityfocus.com/bid/18255Exploit

Published

Jun 6, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2859PHP remote file inclusion vulnerability in MyBloggie 2.1.1 a…
• CVE-2006-2860PHP remote file inclusion vulnerability in Webspotblogging 3…
• CVE-2006-2861SQL injection vulnerability in index.php in Particle Wiki 1.…
• CVE-2006-2862SQL injection vulnerability in viewimage.php in Particle Gal…
• CVE-2006-2863PHP remote file inclusion vulnerability in class.cs_phpmaile…
• CVE-2006-2864Multiple PHP remote file inclusion vulnerabilities in BlueSh…
• CVE-2006-2866PHP remote file inclusion vulnerability in layout/prepend.ph…
• CVE-2006-2867SQL injection vulnerability in editpost.php in CoolForum 0.8…
• CVE-2006-2868Multiple PHP remote file inclusion vulnerabilities in Clarol…
• CVE-2006-2869Unspecified vulnerability in the CHM unpacker in avast! befo…
• CVE-2006-2870Cross-site scripting (XSS) vulnerability in forum_search.asp…
• CVE-2006-2871PHP remote file inclusion vulnerability in include/common.ph…