CVE-2006-7128

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
06/03/2007
Last modified:
09/04/2025

Description

PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the website parameter.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:salims_softhouse:jaf_cms:4.0:rc1:*:*:*:*:*:*