Vulnerabilities > CVE-2007-1896 - Directory Traversal vulnerability in Myspeach
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) and trailing %00 (NULL) in a my_ms[root] cookie.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |
Exploit-Db
| description | MySpeach <= 3.0.7 Remote/Local File Inclusion Vulnerability. CVE-2007-1895,CVE-2007-1896. Webapps exploit for php platform |
| file | exploits/php/webapps/3657.txt |
| id | EDB-ID:3657 |
| last seen | 2016-01-31 |
| modified | 2007-04-03 |
| platform | php |
| port | |
| published | 2007-04-03 |
| reporter | Xst3nZ |
| source | https://www.exploit-db.com/download/3657/ |
| title | MySpeach <= 3.0.7 - Remote/Local File Inclusion Vulnerability |
| type | webapps |