CVE-2006-7194 in Agora信息

摘要

由 VulDB • 2026-06-28

Agora 1.4 RC1 中 modules/Mysqlfinder/MysqlfinderAdmin.php 模块存在远程文件包含漏洞,当启用 register_globals 时,攻击者可通过在 _SESSION[PATH_COMPOSANT] 参数中使用 URL 来执行任意 PHP 代码。

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

来源

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!