NetSight
high7.5Public exploit code

CVE-2006-7119

PHP remote file inclusion vulnerability in kernel/system/startup.php in J.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distributed on comscripts.com, allows remote attackers to execute arbitrary PHP code via a URL in the CFG_PHPGIGGLE_ROOT parameter.

Affected products

VendorProductAffected versions
PhpgigglePhpgiggle
through 12.08

References