CVEvulnerability
CVE-2006-0223
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-01-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." (dot dot) sequences in the username field.
Affected configurations
• topcmm computing 123 flash chat server 5.0
• topcmm computing 123 flash chat server 5.1
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://secunia.com/advisories/18455 Vendor Advisory
- http://www.123flashchat.com/flash-chat-server-v512.html Patch
- http://www.osvdb.org/22440 www.osvdb.org
- http://www.securityfocus.com/bid/16235 Patch
- http://www.vupen.com/english/advisories/2006/0198 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24137 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/18455 Vendor Advisory
- http://www.123flashchat.com/flash-chat-server-v512.html Patch
- http://www.osvdb.org/22440 www.osvdb.org
- http://www.securityfocus.com/bid/16235 Patch
- http://www.vupen.com/english/advisories/2006/0198 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24137 exchange.xforce.ibmcloud.com