PT-2007-1328 · Wikkawiki · Wikkawiki

Published 2007-02-24 · Updated 2017-07-29 · CVE-2006-7049

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WikkaWiki versions prior to 1.1.6.2

Description The issue allows remote attackers to bypass intended access restrictions and access arbitrary PHP files due to incorrect argument order in the strstr and strrpos functions called by the Method method.

Recommendations For versions prior to 1.1.6.2, update to version 1.1.6.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-7049

Affected Products

Wikkawiki

References · 7

• http://secunia.com/advisories/20628 · Vendor Advisory
• http://osvdb.org/26543 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-7049 · Security Note
• http://securityfocus.com/bid/18484 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27226 · Note
• http://wikkawiki.org/WikkaReleaseNotes · Note
• http://vupen.com/english/advisories/2006/2381 · Note