The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T20:50:05.971Z
Reserved: 2007-02-23T00:00:00
Link: CVE-2006-7049

No data.

Status : Modified
Published: 2007-02-24T00:28:00.000
Modified: 2024-11-21T00:24:15.930
Link: CVE-2006-7049

No data.