CVE-2006-7131: Jinzora

High severity, CVSS 10.0. EPSS: 4% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the web_root parameter.

Affected products

• Jinzora Jinzora: version 2.6 only

Published 2007-03-06. Last modified 2026-06-16.