CVE-2007-1895

no score yetEPSS 2.3%

PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, allows remote attackers to execute arbitrary PHP code via an ftp URL in a my_ms[root] cookie, a different vector than CVE-2007-0491 and CVE-2006-4630.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
Published: 2007-04-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sky_gunning:myspeach

References

http://osvdb.org/34145
http://secunia.com/advisories/24760
http://www.vupen.com/english/advisories/2007/1261
https://www.exploit-db.com/exploits/3657
http://osvdb.org/34145

Check your stack JSON