CVE-2006-7124
PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for...
PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter.
Exploit likelihood
What each source reports
NVD Score used
PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter.
- Record
CVE-2006-7124- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter.
- Record
CVE-2006-7124- Updated
- 2026-11-02
EUVDEUVD-2006-7106 No score
PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter.
- Record
EUVD-2006-7106- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7mmh-mpmr-2vj6 No score
PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for...
PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter.
- Record
GHSA-7mmh-mpmr-2vj6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-7124 is a high vulnerability (CVSS 7.5) in Joomla Bsq Sitestats, published March 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.72%, the 77th percentile. No source names a fixed version.
References
osvdb.org/29287
securityfocus.com/bid/20267
exchange.xforce.ibmcloud.com/vulnerabilities/29269
developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats
securityreason.com/securityalert/2360
secunia.com/secunia_research/2006-63/advisory
nvd.nist.gov/vuln/detail/CVE-2006-7124
github.com/advisories/GHSA-7mmh-mpmr-2vj6