CVE-2006-7019: High severity Phpwcms Phpwcms vulnerability
phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via crafted arguments to the (1) textevento and (2) emaileventonomeevento parameters to phpwcmscodesnippets/mailfileform.php and sampleextphp/mailfileform.php, which is processed by the renderPHPcode function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-7019?
CVE-2006-7019 is considered a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2006-7019?
To fix CVE-2006-7019, upgrade your phpwcms installation to version 1.2.5 or later.
What versions of phpwcms are affected by CVE-2006-7019?
CVE-2006-7019 affects phpwcms versions up to 1.2.5-DEV and 1.1 before RC4.
What types of attacks can be executed due to CVE-2006-7019?
CVE-2006-7019 allows attackers to execute arbitrary code through crafted parameters.
Are there any specific parameters exploited in CVE-2006-7019?
The parameters exploited in CVE-2006-7019 are text_evento and email_eventonome_evento.