CVE-2004-1535: PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote a...

Security readout for executives and security teams

CVE-2004-1535 affects the Cash Mod module for phpBB. A vulnerable admin_cash.php page can be made to load PHP code from a remote server, which could let an attacker run code on the web server. The provided sources do not include a CVSS score, confirmed patch, or active exploitation evidence. Likely exposure is limited to internet-reachable phpBB installations using the Cash Mod module, especially where admin_cash.php is accessible. The source bundle does not provide CPEs, exact version ranges, or deployment prevalence, so asset discovery is required. Prioritize remediation for any exposed legacy forum using Cash Mod. The business risk is potential server-side code execution, but urgency should be validated through asset discovery because affected-product metadata and exploit evidence are incomplete. Mitigation focus: Inventory phpBB sites for the Cash Mod module and admin_cash.php exposure.; Check Cash Mod and phpBB vendor or project guidance for confirmed fixes.; Disable or remove Cash Mod where it is not operationally required..

Prepared

Jun 30, 2026, 00:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.