CVE-2006-7127

MEDIUM 6.8CVE-2006-7127 · Published 06/03/2007 · updated 16/06/2026

In short

CVE-2006-7127 is a MEDIUM (CVSS 6.8) vulnerability affecting jaf cms (salims softhouse).
Chance of exploitation in the next 30 days (EPSS): 5.7%, higher than 93.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jaf cms salims_softhouse	`= 4.0`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the main_dir parameter to (1) forum/main.php and (2) forum/headlines.php.

References

secunia.com/advisories/22143 · Vendor Advisory
rahim.webd.pl/exploity/Exploits/92.txt · Exploit
securityfocus.com/bid/20329 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/29348
exploit-db.com/exploits/2474
exploit-db.com/exploits/5317

More vulnerabilities in jaf cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jaf cms

salims_softhouse

= 4.0

No fix yet

More vulnerabilities in jaf cms

See all →