Unscored CVE-2006-5898 EUVD-2006-5881GHSA-ch38-5gvh-4q25

Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitr…

Published Nov 15, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter.

References

phpmychat-languages-source-disclosure(30121) vdb-entry
1852 third-party-advisory
20061108 PhpMyChat <= 0.14.5 Source Code Disclosure Vulnerability mailing-list