CVE-2006-6938: Nitrotech

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote attackers to include arbitrary files via ".." sequences in the root parameter.

Affected products

• Nitrotech Nitrotech: version 0.0.3a only

Published 2007-01-17. Last modified 2026-06-16.