CVE-2006-7124

Currently unrated

Key Information:

Vendor
Joomla
Status
Bsq Sitestats
Vendor
CVE Published:
6 March 2007

Summary

PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter.

References

http://www.osvdb.org/29287
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/20267
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/29269
vdb-entryx_refsource_XF

EPSS Score

1% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.