CVE-2006-1963

CVE-2006-1963 describes a directory traversal vulnerability in PCPIN Chat 5.0.4 and earlier, allowing authenticated attackers to execute arbitrary PHP code. By manipulating a language cookie with ".." sequences, attackers can include and execute malicious PHP code disguised as a smiliefile image. This vulnerability has a CVSS score of 5.5, indicating a medium severity with low attack complexity, requiring authentication, and potentially leading to partial confidentiality and integrity compromise. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.