CVE-2006-3053

CVE-2006-3053 describes a disputed remote file inclusion vulnerability in PHORUM 5.1.13 and earlier, specifically within the common.php file. Attackers could potentially execute arbitrary PHP code by manipulating the PHORUM[http_path] parameter with a malicious URL. Despite the vendor's dispute and CVE analysis concurring with the vendor's assessment that common.php prevents direct calls, the CVSS score of 7.5 indicates a high severity, with low attack complexity and potential for partial confidentiality, integrity, and availability impacts. While there is an ExploitDB entry for PHORUM 3.x/5.x related to common.php remote file inclusion, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.