CVE-2007-1896

Published: Apr 9, 2007Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) and trailing %00 (NULL) in a my_ms[root] cookie.

Affected (4)

Products: Sky Gunning: Myspeach

Sky Gunning

1 product

Myspeach

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Sky Gunning Myspeach	Version 2.1_beta
Sky Gunning Myspeach	Version 3.0.2
Sky Gunning Myspeach	Version 3.0.6
Sky Gunning Myspeach	Version 3.0.7

References (10)

http://osvdb.org/34146

Source: cve@mitre.org

http://secunia.com/advisories/24760

Source: cve@mitre.org

http://secunia.com/advisories/24766

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1261

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3657

Source: cve@mitre.org

http://osvdb.org/34146