CVE-2008-4718: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the helpfile parameter, a different vector than CVE-2006-2156...

X7 Chat <= 2.0.1A1 (mini.php help_file) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================================== X7 Chat = 2.0.1A1 mini.php helpfile Local File Inclusion Vulnerability ==========================================================================...