CVE-2007-1896: Sky Gunning Myspeach

Medium severity, CVSS 5.8. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) and trailing %00 (NULL) in a my_ms[root] cookie.

Affected products

• Sky Gunning Myspeach: version 2.1_beta only; version 3.0.2 only; version 3.0.6 only; version 3.0.7 only

Published 2007-04-09. Last modified 2026-06-16.