← Database

CVE-2007-1896

MEDIUM CVSS: 5.8 Published: 2007-04-09 Modified: 2026-06-16

Description

Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) and trailing %00 (NULL) in a my_ms[root] cookie.

Affected Platforms

Sky Gunning Myspeach

Weakness Type

NVD-CWE-Other

References