← Database

CVE-2006-0625

MEDIUM CVSS: 6.4 Published: 2006-02-09 Modified: 2026-06-16

Description

Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALS[type_urls] parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file parameter to spip_acces_doc.php3.

Affected Platforms

Spip Spip

Weakness Type

NVD-CWE-Other

References