CVE-2006-7079

9.8CRITICAL

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute

Опубликовано: 3/2/2007Обновлено: 4/9/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code by modifying the $xoopsOption['pagetype'] variable.

ИИ-АнализНа базе ИИ

Затронутые продукты

exv2content_management_system

Доступные эксплойты (1)

Ссылки