First published: Thu Feb 09 2006(Updated: )
Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALS[type_urls] parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file parameter to spip_acces_doc.php3.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SPIP SPIP | =1.8.2d | |
SPIP SPIP | =1.8.2e | |
SPIP SPIP | =1.8.2g |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-0625 is classified as a medium severity vulnerability due to its potential for remote code execution.
CVE-2006-0625 exploits directory traversal by allowing attackers to manipulate the GLOBALS[type_urls] parameter using ".." sequences to access arbitrary files.
CVE-2006-0625 affects SPIP versions 1.8.2d, 1.8.2e, and 1.8.2g.
To fix CVE-2006-0625, upgrade to a version of SPIP that addresses this directory traversal vulnerability, beyond 1.8.2g.
The potential impacts of CVE-2006-0625 include unauthorized access to sensitive files and the possibility of executing arbitrary code on the server.