AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-1895

MEDIUM · CVSS 6.5 EPSS 1.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-04-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2006-1895
Severity
MEDIUM
CVSS
6.5
EPSS
1.39%

Original NVD Description

Direct static code injection vulnerability in includes/template.php in phpBB allows remote authenticated users with write access to execute arbitrary PHP code by modifying a template in a way that (1) bypasses a loose ".*" regular expression to match BEGIN and END statements in overall_header.tpl, or (2) is used in an eval statement by includes/bbcode.php for bbcode.tpl.