CVE-2006-4420 - Directory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to include arbitrary local files via ".." sequences in the lang parameter

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to include arbitrary local files via ".." sequences in the lang parameter

Published Aug 28, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 2.61%

Description

Directory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to include arbitrary local files via ".." sequences in the lang parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.securityfocus.com/bid/19710
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/28565
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2253
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/19710		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/28565		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2253		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 28, 2006

Updated Aug 7, 2024

Reserved Aug 28, 2006

Link CVE-2006-4420

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-4420

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-4420