Skip to main content
← All vulnerabilities
CVE-2006-0976

Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary file

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-27311

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 7

exchange.xforce.ibmcloud.com

vupen.com

nsag.ru

securityfocus.com

secunia.com

Exploit-DB