CVE:CVE-2006-5187
CNNVD:CNNVD-200610-094
Bulletin Board Ace (BBaCE) 3.5及更早版本的includes/functions.php中存在PHP远程文件包含漏洞。远程攻击者通过phpbb_root_path参数中的URL执行任意PHP代码。
solution:Upgrade bulletin_board_ace bulletin_board_ace to a higher version than 3.5,3.4,and avoid the version (,3.5],3.4