Unrated severityNVD Advisory· Published Feb 15, 2007· Updated Jun 16, 2026

CVE-2006-7022

Description

The Tools module in fx-APP 0.0.8.1 allows remote attackers to misrepresent the contents of a web page via an arbitrary URL in the url parameter to a showhtml action for index.php, which causes the URL to be displayed within an iframe.

Affected products

Fx App/Fx App2 versions
cpe:2.3:a:fx-app:fx-app:0.0.8.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fx-app:fx-app:0.0.8.1:*:*:*:*:*:*:*
- (no CPE)range: = 0.0.8.1

Patches

Vulnerability mechanics

References

securityreason.com/securityalert/2251nvd
www.securityfocus.com/archive/1/436691/30/4500/threadednvd
www.securityfocus.com/bid/18361nvd
exchange.xforce.ibmcloud.com/vulnerabilities/27180nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000