CVE-2006-7119

phpgiggle < 12.08 - Remote File Inclusion via CFG_PHPGIGGLE_ROOT Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-7119. PoCs published by ajann.

AI-analyzed exploit summary This is a writeup describing a remote file include vulnerability in Php Giggle <= 12.08. The vulnerability allows an attacker to include arbitrary files via the CFG_PHPGIGGLE_ROOT parameter in startup.php.

Description

PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distributed on comscripts.com, allows remote attackers to execute arbitrary PHP code via a URL in the CFG_PHPGIGGLE_ROOT parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by ajann · textwebappsphp
https://www.exploit-db.com/exploits/2732

This is a writeup describing a remote file include vulnerability in Php Giggle <= 12.08. The vulnerability allows an attacker to include arbitrary files via the CFG_PHPGIGGLE_ROOT parameter in startup.php.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Php Giggle <= 12.08
No auth needed
Prerequisites: A vulnerable version of Php Giggle · Ability to send HTTP requests to the target server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/2732
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/30072

Scores

EPSS 0.0230
EPSS Percentile 81.0%

Details

Status published
Products (1)
phpgiggle/phpgiggle < 12.08
Published Mar 06, 2007
Tracked Since Feb 18, 2026