CVE-2006-7001
7.1
Vector
AV:N/AC:M/Au:N/C:C/I:N/A:N
Exploitability: 8.6 / Impact: 6.9
Source: NVD
Description
Directory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the L parameter, a different issue than CVE-2006-5897. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected (1)
Products: Phpmychat Plus: Phpmychat Plus
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| version ≤ 1.9 |
References (2)
Timeline
No history available yet.