CVE-2006-1073: Simplog

Medium severity, CVSS 6.4. EPSS: 3.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.

Affected products

• Simplog Simplog: up to and including 1.0.2

Published 2006-03-08. Last modified 2026-06-16.