Every CVE Search/ Get API key

CVE-2006-7132

Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers...

10.0 HighPublic exploit

Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary local files via the pmdlang parameter to viewticket.php.

Exploit likelihood

3.72%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary local files via the pmdlang parameter to viewticket.php.

Record
CVE-2006-7132
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary local files via the pmdlang parameter to viewticket.php.

Record
CVE-2006-7132
Updated
2026-11-02
EUVDEUVD-2006-7114 No score

Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary local files via the pmdlang parameter to viewticket.php.

Record
EUVD-2006-7114
Updated
2026-11-03
GitHub AdvisoriesGHSA-vv57-5f32-8g5h No score

Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers...

Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary local files via the pmdlang parameter to viewticket.php.

Record
GHSA-vv57-5f32-8g5h
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHPMyDesk 1.0 Beta - 'viewticket.php' Local File Inclusion2006-10-28

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-7132 is a high vulnerability (CVSS 10.0) in Cynux Softwares Phpmydesk, published March 6, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.72%, the 89th percentile. No source names a fixed version.

References

MoveEnter Open