CVE-2006-1073

Description

Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25067

http://www.vupen.com/english/advisories/2006/0839

http://www.securityfocus.com/bid/16965

http://www.securityfocus.com/archive/1/426769/100/0/threaded

http://securityreason.com/securityalert/542

http://secunia.com/advisories/19115

http://notlegal.ws/simplogsploit.txt

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS