CVE-2006-1083

CVE-2006-1083 describes multiple directory traversal vulnerabilities in PHP-Stats versions 0.1.9.1 and earlier. Attackers can exploit these flaws by manipulating the 'option[language]' and 'option[template]' parameters, among others, in scripts like 'admin.php', to read and potentially execute arbitrary files on the server. This vulnerability carries a CVSS score of 7.5, indicating high severity. It can be exploited remotely without authentication (AV:N/AC:L/Au:N), leading to potential compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). Specifically, the 'admin.php/option[language]' vector allows unauthenticated remote attackers to include arbitrary files. There is no evidence of active exploitation, and no public exploit intelligence such as Metasploit, Nuclei, or ExploitDB modules are available. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.