CVE:CVE-2006-5897
CNNVD:CNNVD-200611-227
PhpMyChat Plus中存在多个目录遍历漏洞，远程攻击者可通过传给(1)avatar.php，(2)colorhelp_popup.php，(3)color_popup.php，(4)index.php，(5)index1.php，(6)lib/connected_users.lib.php，(7)lib/index.lib.php和(8)phpMyChat.php3的ChatPath参数；和传给logs.php的(9)L参数（该参数中包含..）来读取任意文件。
solution:Upgrade phpheaven phpmychat_plus to a higher version than 1.9,and avoid the version (,1.9]