CVE-2006-6445

no score yetEPSS 6.7%

envolution envolution: no CVSS score yet. EPSS 6.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.

EPSS: 6.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
Published: 2006-12-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

envolution:envolution

References

http://www.securityfocus.com/bid/21413
http://www.vupen.com/english/advisories/2006/4836
https://exchange.xforce.ibmcloud.com/vulnerabilities/30700
https://www.exploit-db.com/exploits/2888
http://www.securityfocus.com/bid/21413

Check your stack JSON