CVE-2006-7079

9.8CRITICAL

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute

发布于: 3/2/2007更新于: 4/9/2025
在NVD查看在MITRE查看

描述

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code by modifying the $xoopsOption['pagetype'] variable.

AI分析AI驱动

受影响产品

exv2content_management_system

可用漏洞利用 (1)

参考资料