CVE-2006-7237
ixprim 2.0 - Remote Code Execution via Theme_Manager.class.php File Inclusion
Title source: llmDescription
PHP remote file inclusion vulnerability in mod/nc_phpmyadmin/core/libraries/Theme_Manager.class.php in Ixprim 2.0 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42471
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/19816
Exploit x_refsource_misc
http://downloads.securityfocus.com/vulnerabilities/exploits/19816.html
Scores
EPSS
0.0150
EPSS Percentile
71.1%
Details
CWE
CWE-94
Status
published
Products (1)
ixprim-cms/ixprim
2.0
Published
Mar 31, 2009
Tracked Since
Feb 18, 2026