CVE-2006-7079

Опубликовано: 02 мар. 2007

Источник: nvd

CVSS3: 9.8

CVSS2: 6.8

EPSS Средний

Описание

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code by modifying the $xoopsOption['pagetype'] variable.

Ссылки

http://www.securityfocus.com/bid/20161
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29116
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/2415
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/20161
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29116
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/2415
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exv2:content_management_system:*:*:*:*:*:*:*:*

Версия до 2.0.4.3 (включая)

EPSS

Процентиль: 94%

0.14938

Средний

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-p97q-m42v-rwxw