How severe is CVE-2006-7209?

CVE-2006-7209 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2006-7209 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-7209?

CVE-2006-7209 affects Zoneo-soft Phptraffica. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2006-7209?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2006-7209 published?

CVE-2006-7209 was published on 2007-06-27 and last updated on 2026-06-16.

CVE-2006-7209

CVE-2006-7209 is a medium-severity vulnerability in Zoneo-soft Phptraffica with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 1% (54th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Zoneo-soft Phptraffica
Published: 2007-06-27
Last modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in phpTrafficA before 1.2beta2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to keywords results in the (1) main, (2) daily, (3) weekly, (4) monthly, (5) new trends, (6) individual page, and (7) search engine statistics.

Frequently asked questions

What is CVE-2006-7209?: Multiple cross-site scripting (XSS) vulnerabilities in phpTrafficA before 1.2beta2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to keywords results in the (1) main, (2) daily, (3) weekly, (4) monthly, (5) new trends, (6) individual page, and (7) search engine statistics.
How severe is CVE-2006-7209?: CVE-2006-7209 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2006-7209 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-7209?: CVE-2006-7209 affects Zoneo-soft Phptraffica. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2006-7209?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2006-7209 published?: CVE-2006-7209 was published on 2007-06-27 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:zoneo-soft:phptraffica:*:*:*:*:*:*:*:*

More vulnerabilities in Zoneo-soft Phptraffica

CVE-2007-3647 — Critical (CVSS 10.0): The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass…
CVE-2014-8340 — High (CVSS 7.5): SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to…
CVE-2007-3427 — High (CVSS 7.5): SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary…
CVE-2007-3428 — High (CVSS 7.5): Multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have an unknown impact via…
CVE-2007-3425 — Medium (CVSS 5.0): Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include…
CVE-2015-2926 — Medium (CVSS 4.3): Cross-site scripting (XSS) vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and earlier allows remote…

All CVEs affecting Zoneo-soft Phptraffica →