CVE-2006-4914

🗓️ 21 Sep 2006 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 74 Views🌐 WEB

Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote file reading via cookies.

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2006-4914	21 Sep 200600:00	–	cvelist
EUVD	EUVD-2006-4901	7 Oct 202500:30	–	euvd
NVD	CVE-2006-4914	21 Sep 200600:07	–	nvd

NVD

Node

Source	Link
vupen	www.vupen.com/english/advisories/2006/3707
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/29050
seclists	www.seclists.org/fulldisclosure/2006/Sep/0341.html
osvdb	www.osvdb.org/29014
secunia	www.secunia.com/advisories/22038
securityfocus	www.securityfocus.com/bid/20120

Parameter	Position	Path	Description	CWE
choix_lng	query param	/choix_langue.php	Directory traversal via choix_lng parameter to set a cookie and indirect inclusion	CWE-22
ze_langue_02	header	/inc/change_lang_ck.php	Inclusion based on crafted cookie value leading to file read	CWE-22

16 Jun 2026 22:30Current

7.1High risk

Vulners AI Score7.1

CVSS 22.6

EPSS0.02455