VulnerabilityModified
CVE-2006-1073
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.
MEDIUM 6.4EPSS 3.14%
Does this matter?
Lower severity and a low EPSS score (3.14%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 3.14% probability · 87th percentile
- CISA KEV
- Not listed
- Affected
- simplog/simplog
- Source
- cve@mitre.org
References
- http://notlegal.ws/simplogsploit.txtURL Repurposed
- http://secunia.com/advisories/19115Vendor Advisory
- http://securityreason.com/securityalert/542
- http://www.securityfocus.com/archive/1/426769/100/0/threaded
- http://www.securityfocus.com/bid/16965
- http://www.vupen.com/english/advisories/2006/0839
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25067
- http://notlegal.ws/simplogsploit.txtURL Repurposed
- http://secunia.com/advisories/19115Vendor Advisory
- http://securityreason.com/securityalert/542
- http://www.securityfocus.com/archive/1/426769/100/0/threaded
- http://www.securityfocus.com/bid/16965
- http://www.vupen.com/english/advisories/2006/0839
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25067
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.