CVE-2006-1073 - Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote a

CVE-2006-1073

Summary

Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.

References

http://notlegal.ws/simplogsploit.txt
http://secunia.com/advisories/19115
http://www.securityfocus.com/bid/16965
http://securityreason.com/securityalert/542
http://www.vupen.com/english/advisories/2006/0839
https://exchange.xforce.ibmcloud.com/vulnerabilities/25067
http://www.securityfocus.com/archive/1/426769/100/0/threaded

Vulnerable Configurations

cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*
cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*

CVSS

Base:	6.4 (as of 14-02-2024 - 01:17)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:N

refmap via4

bid	16965
bugtraq	20060304 Simplog <= 1.0.2 Vulnerabilities
misc	http://notlegal.ws/simplogsploit.txt
secunia	19115
sreason	542
vupen	ADV-2006-0839
xf	simplog-index-traverse-directories(25067)

Last major update

14-02-2024 - 01:17

Published

08-03-2006 - 00:02

Last modified

14-02-2024 - 01:17