| Package | Affected versions | Patched versions |
|---|---|---|
| pcpin chat | = 3.1.5= 3.1.6= 3.1.7r= 3.2.0= 3.2.1= 3.2.3= 4.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4 |
Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." (dot dot) in a language cookie, as demonstrated by uploading then accessing a smiliefile image that actually contains PHP code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free