medium5.0Public exploit code
CVE-2006-3972
Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary fi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ajax Chat 0.1 - 'operator_chattranscript.php?chatid' Traversal Arbitrary File Access2006-07-31 · webapps · php · Verified
Impact
Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. (dot dot) in the chatid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scott Weedon | Ajax Chat | Version 0.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0716.html
- http://secunia.com/advisories/21286
- http://www.osvdb.org/27642
- http://www.securityfocus.com/bid/19238
- http://www.vupen.com/english/advisories/2006/3064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28085
- http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0716.html
- http://secunia.com/advisories/21286
- http://www.osvdb.org/27642
- http://www.securityfocus.com/bid/19238
- http://www.vupen.com/english/advisories/2006/3064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28085