CVE-2006-7127

creationtimestamp| type| source ---|---|--- 2008-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5317...

CVE-2006-7127

CVE-2006-7127 affects the JAF CMS (versions 4.0 and 4.0 RC2). Affected component: the forum/ directory handling pages (forum/main.php and forum/headlines.php). Root cause: remote PHP code execution via a crafted URL passed to the main_dir parameter, enabling an attacker to include and run arbitra...