PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter, a different vector than CVE-2006-6770.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2007-03-06 01:19
Updated : 2024-02-04 17:13
NVD link : CVE-2006-7130
Mitre link : CVE-2006-7130
CVE.ORG link : CVE-2006-7130
JSON object : View
Products Affected
jinzora
- jinzora
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')