CVE-2006-0714: Flyspray

Medium severity, CVSS 5.0. EPSS: 7.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the adodbpath parameter.

Affected products

• Flyspray Flyspray: version 0.9.7 only

Published 2006-02-15. Last modified 2026-06-16.