CVE-2006-0957

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.71%

Published

Mar 2, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the (1) X-Forwarded-For and (2) Client-Ip HTTP headers, which are stored in Data/flood.db.php.

Affected Products (6)

zoneo-soft · freeforumvulnerable

References (12)

http://evuln.com/vulns/89/summary.html

PatchVendor Advisory

http://secunia.com/advisories/19020

PatchVendor Advisory

http://soft.zoneo.net/freeForum/changes.php

http://www.securityfocus.com/archive/1/427321/100/0/threaded

http://www.securityfocus.com/bid/16871

http://www.vupen.com/english/advisories/2006/0759

http://evuln.com/vulns/89/summary.html

PatchVendor Advisory

http://secunia.com/advisories/19020

PatchVendor Advisory

http://soft.zoneo.net/freeForum/changes.php

http://www.securityfocus.com/archive/1/427321/100/0/threaded

http://www.securityfocus.com/bid/16871

http://www.vupen.com/english/advisories/2006/0759

KEV Catalog EPSS Scores Vendors All CVEs