Critical severity9.8NVD Advisory· Published Mar 2, 2007· Updated Apr 23, 2026
CVE-2006-7079
CVE-2006-7079
Description
Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code by modifying the $xoopsOption['pagetype'] variable.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.exploit-db.com/exploits/2415nvdExploitThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/20161nvdBroken LinkThird Party AdvisoryVDB EntryVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/29116nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.