CVE-2006-7049

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-24 · updated 2026-06-16

Description

The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files.

Affected products

Wikkawiki: 1.1.6.0, 1.1.6.1

References

http://secunia.com/advisories/20628
http://wikkawiki.org/WikkaReleaseNotes
http://www.osvdb.org/26543
http://www.securityfocus.com/bid/18484
http://www.vupen.com/english/advisories/2006/2381
https://exchange.xforce.ibmcloud.com/vulnerabilities/27226
http://secunia.com/advisories/20628
http://wikkawiki.org/WikkaReleaseNotes
http://www.osvdb.org/26543
http://www.securityfocus.com/bid/18484
http://www.vupen.com/english/advisories/2006/2381
https://exchange.xforce.ibmcloud.com/vulnerabilities/27226

Get alerted when CVE-2006-7049 or the next vulnerability affects your stack