CVE-2006-7049 - The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files

Back Back to CVE browser

HIGH

The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files

Published Feb 24, 2007

7.5

HIGH

CVSS 2.0

EPSS 1.65%

Description

The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://secunia.com/advisories/20628
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://wikkawiki.org/WikkaReleaseNotes
x_refsource_CONFIRM
http://www.osvdb.org/26543
vdb-entryx_refsource_OSVDBPatch
http://www.securityfocus.com/bid/18484
vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2006/2381
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-7031
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27226
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/20628		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://wikkawiki.org/WikkaReleaseNotes		x_refsource_CONFIRM
http://www.osvdb.org/26543		vdb-entryx_refsource_OSVDBPatch
http://www.securityfocus.com/bid/18484		vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2006/2381		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-7031		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27226		vdb-entryx_refsource_XF