CVE-2006-6033

CVE-2006-6033 describes multiple directory traversal vulnerabilities in Simple PHP Blog (SPHPBlog), likely version 0.4.8. Attackers can exploit these flaws by manipulating the 'blog_theme' parameter in various PHP scripts to read arbitrary files and potentially include arbitrary PHP code. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.