Kubix

kubix

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Kubix

kubix

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-7117 1Kubix 1Kubix Apr 23, 2026 Mar 6, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly han...Show more Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and (2) read arbitrary files via ".." sequences in the file parameter in an add_dl action to adm_index.php, as demonstrated by reading connect.php.Show less
CVE-2006-7116 1Kubix 1Kubix Apr 23, 2026 Mar 6, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the member_id parameter ($id variable) to index.php.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2006-7117

1Kubix

Apr 23, 2026

Mar 6, 2007

N/A· v4

N/A· v3

6.8 MEDIUM· v2

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and (2) read arbitrary files via ".." sequences in the file parameter in an add_dl action to adm_index.php, as demonstrated by reading connect.php.Show less

CVE-2006-7116

1Kubix

Apr 23, 2026

Mar 6, 2007

N/A· v4

N/A· v3

7.5 HIGH· v2

SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the member_id parameter ($id variable) to index.php.