Back to CVE Browser

CVE-2006-7015

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1530%

EPSS Percentile41.30th

PublishedFeb 15, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

PHP remote file inclusion vulnerability in admin.jobline.php in Jobline 1.1.1 allows remote attackers to execute arbitrary code via a URL in the mosConfig_absolute_path parameter. NOTE: CVE disputes this issue because the script is protected against direct requests

Affected Platforms (CPE)

📦

Jobline

Jobline

= 1.1.1

References & Advisories

🔗 http://securityreason.com/securityalert/2254

🔗 http://www.attrition.org/pipermail/vim/2007-February/001325.html

🔗 http://www.securityfocus.com/archive/1/436990/30/4440/threaded

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/27125

🔗 http://securityreason.com/securityalert/2254

🔗 http://www.attrition.org/pipermail/vim/2007-February/001325.html

🔗 http://www.securityfocus.com/archive/1/436990/30/4440/threaded

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/27125

Related Vulnerabilities

CVE-2009-25546.8

SQL injection vulnerability in the search method in jobline.class.php in Jobline (com_jobline) 1.1.2.2, 1.3.1, and possibly earlie...

CVE-2006-011910.0

Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due...

CVE-2006-623510.0

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to ...

CVE-2006-012810.0

Buffer overflow in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote attackers to have an unknown impact via un...