CVEvulnerability

CVE-2006-7049

7.5 HIGH Published 2007-02-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-02-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files.

Affected configurations

• wikkawiki wikkawiki 1.1.6.0 • wikkawiki wikkawiki 1.1.6.1

Related

Referenced by CWE · observed example (2)

  • CWE-628 Function Call with Incorrectly Specified Arguments weakness
  • CWE-683 Function Call With Incorrect Order of Arguments weakness

References