CVE-2006-7156

PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a module for miniBB, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter.

• http://secunia.com/advisories/22401Vendor Advisory
• http://www.attrition.org/pipermail/vim/2007-March/001411.htmlExploit
• http://www.osvdb.org/29709Patch, Vendor Advisory
• http://www.securityfocus.com/bid/20492
• http://www.vupen.com/english/advisories/2006/4026
• https://www.exploit-db.com/exploits/2528
• http://secunia.com/advisories/22401Vendor Advisory
• http://www.attrition.org/pipermail/vim/2007-March/001411.htmlExploit
• http://www.osvdb.org/29709Patch, Vendor Advisory
• http://www.securityfocus.com/bid/20492
• http://www.vupen.com/english/advisories/2006/4026
• https://www.exploit-db.com/exploits/2528

Published

Mar 7, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-7150Multiple SQL injection vulnerabilities in Mambo 4.6.x allow …
• CVE-2006-7151Untrusted search path vulnerability in the libtool-ltdl libr…
• CVE-2006-7152default.asp in ASP-Nuke Community 1.5 and earlier allows rem…
• CVE-2006-7153PHP remote file inclusion vulnerability in index.php in Mini…
• CVE-2006-7154Iono allows remote attackers to obtain the full server path …
• CVE-2006-7155Novell BorderManager 3.8 SP4 generates the same ISAKMP cooki…
• CVE-2006-7157Buffer overflow in Google Earth v4.0.2091 (beta) allows remo…
• CVE-2006-7158Cross-site scripting (XSS) vulnerability in Oracle Applicati…
• CVE-2006-7159Directory traversal vulnerability in include/prune_torrents.…
• CVE-2006-7160The Sandbox.sys driver in Outpost Firewall PRO 4.0, and poss…
• CVE-2006-7161SQL injection vulnerability in giris_yap.asp in Hazir Site 2…
• CVE-2006-7162PuTTY 0.59 and earlier uses weak file permissions for (1) pp…