CVE-2006-1777

EPSS 9.8%

Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the s parameter, as demonstrated by injecting PHP sequences into an Apache error_log file, which is then included by doc/index.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/1663unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://retrogod.altervista.org/simplog_092_incl_xpl.html http://secunia.com/advisories/19628 http://securitytracker.com/id?1015904 https://exchange.xforce.ibmcloud.com/vulnerabilities/25775 https://www.exploit-db.com/exploits/1663 http://www.osvdb.org/24559 http://www.securityfocus.com/archive/1/430743/100/0/threaded http://www.securityfocus.com/bid/17490 http://www.vupen.com/english/advisories/2006/1332