CVE-2007-1895 | BDVDB-2026-23352 Detail

Description#

PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, allows remote attackers to execute arbitrary PHP code via an ftp URL in a my_ms[root] cookie, a different vector than CVE-2007-0491 and CVE-2006-4630.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/3657
http://secunia.com/advisories/24760
http://www.vupen.com/english/advisories/2007/1261
http://osvdb.org/34145

Exploit#

https://www.exploit-db.com/exploits/3657

History#

Version 12007-04-09Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.