CVE-2006-7086
The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain...
The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database via a direct request with a modified dl parameter.
Exploit likelihood
What each source reports
NVD Score used
The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database via a direct request with a modified dl parameter.
- Record
CVE-2006-7086- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database via a direct request with a modified dl parameter.
- Record
CVE-2006-7086- Updated
- 2026-11-02
EUVDEUVD-2006-7068 No score
The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database via a direct request with a modified dl parameter.
- Record
EUVD-2006-7068- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3mff-fpv7-5r9m No score
The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain...
The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database via a direct request with a modified dl parameter.
- Record
GHSA-3mff-fpv7-5r9m- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Hot Links - Perl PHP Information Disclosure | 2006-11-15 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-7086 is a medium vulnerability (CVSS 4.3) in Mrcgiguy Hot Links, published February 28, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.51%, the 89th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/30340
secunia.com/advisories/22970
marc.info?l=bugtraq&m=116373064308228&w=2
securityfocus.com/bid/21112
vupen.com/english/advisories/2006/4585
nvd.nist.gov/vuln/detail/CVE-2006-7086
github.com/advisories/GHSA-3mff-fpv7-5r9m