Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

TopCMM 123 Flash Chat Server lets attackers write files

CVE-2006-0223 · published 20 years ago
Summary

The version 5.1 of TopCMM 123 Flash Chat Server allows a user name containing ".." to move outside its intended folder and create or replace any file on the server. This could let an attacker add malicious code, steal data, or disrupt service. Update to a patched version or apply the vendor's recommended configuration changes immediately.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
topcmm_computing 123_flash_chat_server 5.0
5.1
cpe:2.3:a:topcmm_computing:123_flash_chat_server:5.0:*:*:*:*:*:*:*
Original advisory text
Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." (dot dot) sequences in the use...
Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." (dot dot) sequences in the username field.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published16 Jan 2006
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2006-0223 · NVD
Track software like this
Free during beta