← Database

CVE-2006-3972

MEDIUM CVSS: 5.0 Published: 2006-08-02 Modified: 2026-06-16

Description

Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. (dot dot) in the chatid parameter.

Affected Platforms

Scott Weedon Ajax Chat

Weakness Type

NVD-CWE-Other

References