CVE-2008-1169: Simm-Comm Sci Photo Chat

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) or "../" (dot dot forward slash) in the GET command.

Affected products

• Simm-Comm Sci Photo Chat: up to and including 3.4.9

Published 2008-03-05. Last modified 2026-06-16.