CVE-2006-7117

no score yetEPSS 2.0%

kubix kubix: no CVSS score yet. EPSS 2.0% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and (2) read arbitrary files via ".." sequences in the file parameter in an add_dl action to adm_index.php, as demonstrated by reading connect.php.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2007-03-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

kubix:kubix

References

http://www.securityfocus.com/bid/21352
https://exchange.xforce.ibmcloud.com/vulnerabilities/30570
https://exchange.xforce.ibmcloud.com/vulnerabilities/30572
https://www.exploit-db.com/exploits/2863
http://www.securityfocus.com/bid/21352

Check your stack JSON