CVE-2006-5898 Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter.
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpheaven phpmychat | <= 0.14.5 | No fix listed |
References
- 1852 third-party-advisory
- 20061108 PhpMyChat <= 0.14.5 Source Code Disclosure Vulnerability mailing-list
- phpmychat-languages-source-disclosure(30121) vdb-entry