CVE-2006-4753

Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

CVE-2006-4753

PHProg before 1.1 has a directory traversal vulnerability in the index.php file: an attacker can use a ".." in the lang parameter to read arbitrary files. The issue stems from improper input handling in the affected component, enabling potential exposure of sensitive server files. A patch is avai...