CVE-2006-7049

CVE-2006-7049 affects WikkaWiki prior to 1.1.6.2. The Method() in wikka.php calls strstr and strrpos with arguments in the wrong order, which can bypass access restrictions and allow remote attackers to access arbitrary PHP files. Public references also describe it as a local file inclusion vulne...