CVE-2006-7022: Fx-App

High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days.

The Tools module in fx-APP 0.0.8.1 allows remote attackers to misrepresent the contents of a web page via an arbitrary URL in the url parameter to a showhtml action for index.php, which causes the URL to be displayed within an iframe.

Affected products

• Fx-App Fx-App: version 0.0.8.1 only

Published 2007-02-15. Last modified 2026-06-16.