CVE-2006-1162

CVE-2006-1162 describes a directory traversal vulnerability in Nodez 4.6.1.1 and earlier, allowing remote attackers to read or include arbitrary PHP files. This is achieved by manipulating the 'op' parameter with dot-dot sequences, potentially leading to the insertion of malicious email parameters into list.gtdat and subsequent access. The vulnerability has a CVSS score of 5.1 (medium severity), indicating a network-based attack with high access complexity, potentially resulting in partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry (EDB-1588) exists, and the CVE has received minimal community discussion or media coverage.