CVE-2006-7184

MEDIO 6.8CVE-2006-7184 · Published 30/03/2007 · updated 16/06/2026

In breve

CVE-2006-7184 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda exhibit engine 2 (photography-on-the-net).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.0%, superiore al 80.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
exhibit engine 2 photography-on-the-net	`≤ 1.22`	No fix yet

Description

Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine (EE) 1.22, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the toroot parameter to (1) fetchsettings.php or (2) fstyles.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

securityfocus.com/bid/20793 · Exploit

Altre vulnerabilità di exhibit engine 2

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free