CVE-2006-7168

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securityreason.com/securityalert/2450Exploit, Third Party Advisory
http://www.securityfocus.com/archive/1/448630/100/0/threadedExploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/20516Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/29595Third Party Advisory, VDB Entry
http://securityreason.com/securityalert/2450Exploit, Third Party Advisory
http://www.securityfocus.com/archive/1/448630/100/0/threadedExploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/20516Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/29595Third Party Advisory, VDB Entry

Timeline

Published: Mar 20, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-71696.8PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows remote attackers to CVE-2006-71707.5Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL commands via the (1) t, (2 CVE-2006-71715.0product_review.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of t CVE-2006-71727.5Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary CVE-2006-717310.0Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP c CVE-2006-717410.0PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitr CVE-2006-71757.5The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not allow the administrator to disable SSLv2 encryp CVE-2006-71764.3The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name CVE-2006-71777.8MadWifi, when Ad-Hoc mode is used, allows remote attackers to cause a denial of service (system crash) via unspecified vectors that lead to CVE-2006-71787.8MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of CVE-2006-71797.8ieee80211_input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement Information Elements (CSA IEs), which allows CVE-2006-71806.8ieee80211_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to ob