CVE-2007-1896

2007-04-0920:19:00

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

High

EPSS

0.007

Percentile

80.1%

JSON

Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local files via a … (dot dot) and trailing %00 (NULL) in a my_ms[root] cookie.

Affected configurations

Nvd

Node

sky_gunningmyspeachMatch2.1_beta

sky_gunningmyspeachMatch3.0.2

sky_gunningmyspeachMatch3.0.6

sky_gunningmyspeachMatch3.0.7

VendorProductVersionCPE
sky_gunningmyspeach2.1_betacpe:2.3:a:sky_gunning:myspeach:2.1_beta:*:*:*:*:*:*:*
sky_gunningmyspeach3.0.2cpe:2.3:a:sky_gunning:myspeach:3.0.2:*:*:*:*:*:*:*
sky_gunningmyspeach3.0.6cpe:2.3:a:sky_gunning:myspeach:3.0.6:*:*:*:*:*:*:*
sky_gunningmyspeach3.0.7cpe:2.3:a:sky_gunning:myspeach:3.0.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sky_gunning	myspeach	2.1_beta	cpe:2.3:a:sky_gunning:myspeach:2.1_beta:::::::*
sky_gunning	myspeach	3.0.2	cpe:2.3:a:sky_gunning:myspeach:3.0.2:::::::*
sky_gunning	myspeach	3.0.6	cpe:2.3:a:sky_gunning:myspeach:3.0.6:::::::*
sky_gunning	myspeach	3.0.7	cpe:2.3:a:sky_gunning:myspeach:3.0.7:::::::*