Vulnerability in Phaos

CVE-2006-4420

Directory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to include arbitrary local files via ".." sequences in the lang parameter.

EPSS: 0.026 (83.5th percentile) — read the EPSS interpretation.

Affected products

  • Phaos — versions 0.9, 0.9.1, 0.9.2
  • N/a — versions n/a

References