CVE-2006-1073
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows...
CVE-2006-1073 is a medium vulnerability (CVSS 6.4) in Simplog, published March 8, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.14%, the 87th percentile. No source names a fixed version.
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.
- Record
CVE-2006-1073- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.
- Record
CVE-2006-1073- Updated
- 2026-11-02
EUVDEUVD-2006-1077 No score
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.
- Record
EUVD-2006-1077- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xccw-v28q-j2c8 No score
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows...
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.
- Record
GHSA-xccw-v28q-j2c8- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Simplog 1.0.2 - Information Disclosure | 2006-03-04 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |
References
exchange.xforce.ibmcloud.com/vulnerabilities/25067
vupen.com/english/advisories/2006/0839
securityreason.com/securityalert/542
securityfocus.com/archive/1/426769/100/0/threaded
secunia.com/advisories/19115
notlegal.ws/simplogsploit.txt
nvd.nist.gov/vuln/detail/CVE-2006-1073
github.com/advisories/GHSA-xccw-v28q-j2c8