CVE-2006-7063: Tinyphpforum

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and execute arbitrary files via ".." sequences in the uname parameter.

Affected products

• Tinyphpforum Tinyphpforum: up to and including 3.6

Published 2007-02-24. Last modified 2026-06-16.