CVE-2006-7049

Published: Feb 24, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files.

Affected (2)

Products: Wikkawiki: Wikkawiki

Wikkawiki

1 product

Wikkawiki

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Wikkawiki Wikkawiki	Version 1.1.6.0
Wikkawiki Wikkawiki	Version 1.1.6.1

References (12)

http://secunia.com/advisories/20628

Source: cve@mitre.org

PatchVendor Advisory

http://wikkawiki.org/WikkaReleaseNotes

Source: cve@mitre.org

http://www.osvdb.org/26543

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/18484

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/2381

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27226

Source: cve@mitre.org

http://secunia.com/advisories/20628