7.1
CVSSv2

CVE-2006-7001

Published: 12/02/2007 Updated: 05/09/2008
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
VMScore: 632
Vector: AV:N/AC:M/Au:N/C:C/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and previous versions allows remote malicious users to read arbitrary files via a .. (dot dot) in the L parameter, a different issue than CVE-2006-5897. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

phpmychat plus phpmychat plus