| Package | Affected versions | Patched versions |
|---|---|---|
| x7 chat | = 1.0.0b= 1.1.1b= 1.1.2b= 1.2.0b= 1.3.0b= 1.3.1b= 1.3.2b= 1.3.3b= 1.3.4b= 1.3.5b= 1.3.6= 2.0.0≤ 2.0.1 |
Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the help_file parameter, a different vector than CVE-2006-2156.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free