CVE-2006-0223

Description

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." (dot dot) sequences in the username field.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24137

http://www.vupen.com/english/advisories/2006/0198

http://www.securityfocus.com/bid/16235

http://www.osvdb.org/22440

http://www.123flashchat.com/flash-chat-server-v512.html

http://secunia.com/advisories/18455

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS