VULNERABILITY INTELLIGENCE
CVE-2007-1895
CVSS score6.8 MEDIUM
EPSS probability2.32%
CISA KEVNot currently listed
Published2007-04-09
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, allows remote attackers to execute arbitrary PHP code via an ftp URL in a my_ms[root] cookie, a different vector than CVE-2007-0491 and CVE-2006-4630.