CVEvulnerability

CVE-2007-1896

5.8 MEDIUM Published 2007-04-09 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-04-09
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N

Description

Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) and trailing %00 (NULL) in a my_ms[root] cookie.

Affected configurations

• sky gunning myspeach 2.1 beta • sky gunning myspeach 3.0.2 • sky gunning myspeach 3.0.6 • sky gunning myspeach 3.0.7

References

http://osvdb.org/34146 osvdb.org
http://secunia.com/advisories/24760 secunia.com
http://secunia.com/advisories/24766 secunia.com
http://www.vupen.com/english/advisories/2007/1261 www.vupen.com
https://www.exploit-db.com/exploits/3657 www.exploit-db.com
http://osvdb.org/34146 osvdb.org
http://secunia.com/advisories/24760 secunia.com
http://secunia.com/advisories/24766 secunia.com
http://www.vupen.com/english/advisories/2007/1261 www.vupen.com
https://www.exploit-db.com/exploits/3657 www.exploit-db.com