Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. (dot dot) in the chatid parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ajax_chat | Scott_weedon | 0.1 (including) | 0.1 (including) |