CVE-2006-7130

Published: Mar 6, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter, a different vector than CVE-2006-6770.

Affected (27)

Products: Jinzora: Jinzora

Jinzora

1 product

Jinzora

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Jinzora Jinzora	Up to 2.1
Jinzora Jinzora	Version 0.1.1
Jinzora Jinzora	Version 0.2
Jinzora Jinzora	Version 0.3.1
Jinzora Jinzora	Version 0.3
Jinzora Jinzora	Version 0.3 pre
Jinzora Jinzora	Version 0.3 pre_2
Jinzora Jinzora	Version 0.4
Jinzora Jinzora	Version 0.5
Jinzora Jinzora	Version 0.6.2
Jinzora Jinzora	Version 0.7
Jinzora Jinzora	Version 0.8.1
Jinzora Jinzora	Version 0.8.2
Jinzora Jinzora	Version 0.9.1
Jinzora Jinzora	Version 0.9.2
Jinzora Jinzora	Version 0.9.3
Jinzora Jinzora	Version 0.9.4
Jinzora Jinzora	Version 0.9.5
Jinzora Jinzora	Version 0.9
Jinzora Jinzora	Version 1.0.1
Jinzora Jinzora	Version 1.1
Jinzora Jinzora	Version 2.0.1
Jinzora Jinzora	Version 2.0
Jinzora Jinzora	Version 2.0 beta_1
Jinzora Jinzora	Version 2.0 beta_2
Jinzora Jinzora	Version 2.0 rc1
Jinzora Jinzora	Version 2.0 rc2