| Reporter | Title | Published | Views | Family All 5 |
|---|---|---|---|---|
 | CVE-2006-7116 | 6 Mar 200701:00 | – | cvelist |
 | kubix 0.7 - Multiple Vulnerabilities | 29 Nov 200600:00 | – | exploitdb |
 | EUVD-2006-7098 | 7 Oct 202500:30 | – | euvd |
 | CVE-2006-7116 | 6 Mar 200701:19 | – | nvd |
 | CVE-2006-7116: Improper Neutralization of Special Elements used in an SQL Command | 6 Mar 200700:00 | – | rapid7 |
| Source | Link |
|---|---|
| securityfocus | www.securityfocus.com/bid/21352 |
| exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/30571 |
| exploit-db | www.exploit-db.com/exploits/2863 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| theme | header | index.php | Local File Inclusion (LFI) via the 'theme' cookie parameter. The application includes a file based on the value provided in the cookie, which can be manipulated to traverse directories. | CWE-23 |
| member_id | header | index.php | SQL Injection via the 'member_id' cookie parameter. The value is used directly in a MySQL query to authenticate users, allowing for authentication bypass. | CWE-89 |
| file | request body | adm_index.php?mod=add_dl | Path Traversal via the 'file' POST parameter. A valid admin session allows an attacker to provide a path (e.g., ../includes/connect.php) to download arbitrary files from the server. | CWE-22 |
| ID | query param | downloads.php | Potential information disclosure or unauthorized access via the 'ID' query parameter in the downloads page. | CWE-287 |
| act | query param | downloads.php | Potential unauthorized action or information disclosure via the 'act' and 'ID' query parameters in the downloads page. | CWE-287 |
| ID | query param | downloads.php | Potential unauthorized action or information disclosure via the 'act' and 'ID' query parameters in the downloads page. | CWE-287 |
| act | query param | adm_index.php?mod=edit_dl | Potential unauthorized file deletion or administrative action via the 'mod', 'act', 'type', and 'ID' query parameters. | CWE-287 |
| del | query param | adm_index.php?mod=edit_dl | Potential unauthorized file deletion or administrative action via the 'mod', 'act', 'type', and 'ID' query parameters. | CWE-287 |
| type | query param | adm_index.php?mod=edit_dl | Potential unauthorized file deletion or administrative action via the 'mod', 'act', 'type', and 'ID' query parameters. | CWE-287 |
| ID | query param | adm_index.php?mod=edit_dl | Potential unauthorized file deletion or administrative action via the 'mod', 'act', 'type', and 'ID' query parameters. | CWE-287 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 22:34Current
9Critical risk
Vulners AI Score9
CVSS 27.5
EPSS0.01176