VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2006· Updated Jun 16, 2026

CVE-2006-6878

CVE-2006-6878

Description

admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights[7] parameter to 1 during a login action.

Affected products

2
  • PHP Update/PHP Update2 versions
    cpe:2.3:a:php-update:php-update:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:php-update:php-update:*:*:*:*:*:*:*:*range: <=2.7
    • (no CPE)range: <=2.7

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.