CVE-2006-7117 - CVE House
Back to Database
Status published Medium CVE-2006-7117

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow...

Vulnerability Description

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and (2) read arbitrary files via ".." sequences in the file parameter in an add_dl action to adm_index.php, as demonstrated by reading connect.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-7117

Credits & Attribution

No credits recorded in the NVD database.

References

More from kubix

View All →
CVE-2006-7116
SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier...
High 7.5

Affected Vendor

Affected Software

kubix
Vulnerable Versions:
0

Timeline

Official Publish: March 6th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.