CVE-2006-7079

9.8CRITICAL

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute

公開日: 3/2/2007更新日: 4/9/2025
NVDで表示MITREで表示

説明

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code by modifying the $xoopsOption['pagetype'] variable.

AI分析AIによる分析

影響を受ける製品

exv2content_management_system

利用可能なエクスプロイト (1)

参照