Unrated severityNVD Advisory· Published Mar 5, 2007· Updated Jun 16, 2026

CVE-2006-7109

Description

Unrestricted file upload vulnerability in IMCE before 1.6, a Drupal module, allows remote authenticated users to upload arbitrary PHP code via a filename with a double extension such as .php.gif.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Drupal/Imce Module
cpe:2.3:a:drupal:imce_module:*:*:*:*:*:*:*:*
Range: <=1.5
Drupal/IMCEllm-fuzzy
Range: <1.6

Patches

Vulnerability mechanics

References

drupal.org/node/87101nvdPatchVendor Advisory
secunia.com/advisories/22261nvdPatchVendor Advisory
www.vupen.com/english/advisories/2006/3892nvd
exchange.xforce.ibmcloud.com/vulnerabilities/29325nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000