Back
CVE-2004-1535
PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the code.
Published: Dec 31, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (16)
| Vendor | Product | Version |
|---|---|---|
| phpbb_group | phpbb | 2.0.0 |
| phpbb_group | phpbb | 2.0.1 |
| phpbb_group | phpbb | 2.0.2 |
| phpbb_group | phpbb | 2.0.3 |
| phpbb_group | phpbb | 2.0.4 |
| phpbb_group | phpbb | 2.0.5 |
| phpbb_group | phpbb | 2.0.6 |
| phpbb_group | phpbb | 2.0.7 |
| phpbb_group | phpbb | 2.0.8 |
| phpbb_group | phpbb | 2.0.9 |
| phpbb_group | phpbb | 2.0.10 |
| phpbb_group | phpbb | rc1 |
| phpbb_group | phpbb | rc1_pre |
| phpbb_group | phpbb | rc2 |
| phpbb_group | phpbb | rc3 |
| phpbb_group | phpbb | rc4 |
GitHub Security Advisory GHSA-4pj9-m96x-crhq
PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB...
References (6)
- http://marc.info/?l=bugtraq&m=110075903308817&w=2
- http://marc.info/?l=bugtraq&m=110082153702843&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18151
- http://marc.info/?l=bugtraq&m=110075903308817&w=2
- http://marc.info/?l=bugtraq&m=110082153702843&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18151
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
6.33%
Top 7% most likely to be exploited
Threat Score
31.9 / 100
Data Sources
NVD
EPSS
GitHub