Back to Database
Status published
Medium
CVE-2006-6770
Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox...
Vulnerability Description
Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter in (1) popup.php, (2) rss.php, (3) ajax_request.php, and (4) mediabroadcast.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-6770
Credits & Attribution
No credits recorded in the NVD database.
References
More from jinzora
View All →CVE-2009-2313
Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8...
High
7.5
CVE-2008-0877
Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5...
Medium
4.3
CVE-2006-7131
PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6...
Critical
10
CVE-2006-7130
PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1...
High
7.5
CVE-2005-2249
Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and...
Critical
10
Affected Vendor
jinzora
View all reports →Affected Software
jinzora
Vulnerable Versions:
0, 2.0.1
Timeline
Official Publish:
December 27th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.