CVE-2006-7183 - PHP remote file inclusion vulnerability in styles.php in Exhibit Engine (EE) 1.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in styles.php in Exhibit Engine (EE) 1.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter

Published Mar 30, 2007

10.0

HIGH

CVSS 2.0

EPSS 3.92%

Description

PHP remote file inclusion vulnerability in styles.php in Exhibit Engine (EE) 1.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the toroot parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.securityfocus.com/bid/21313
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/30516
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2850
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/21313		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/30516		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2850		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 30, 2007

Updated Aug 7, 2024

Reserved Mar 30, 2007

Link CVE-2006-7183

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-7183

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-7183