CVE-2006-7127

EPSS 5.6%

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the main_dir parameter to (1) forum/main.php and (2) forum/headlines.php.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/2474/unverified exploitdbwww.exploit-db.com/exploits/2474unverified cve_referencewww.exploit-db.com/exploits/5317unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/22143 https://exchange.xforce.ibmcloud.com/vulnerabilities/29348 https://www.exploit-db.com/exploits/2474/https://www.exploit-db.com/exploits/5317 http://www.rahim.webd.pl/exploity/Exploits/92.txt http://www.securityfocus.com/bid/20329