Description (CNA)
Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." (dot dot) sequences in the username field.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/18455
- http://www.securityfocus.com/bid/16235
- http://www.vupen.com/english/advisories/2006/0198
- http://www.123flashchat.com/flash-chat-server-v512.html
- http://www.osvdb.org/22440
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24137
ADP enrichment
No English description supplied.