CVE-2006-4753

PHProg before 1.1 has a directory traversal vulnerability in the index.php file: an attacker can use a ".." in the lang parameter to read arbitrary files. The issue stems from improper input handling in the affected component, enabling potential exposure of sensitive server files. A patch is avai...