A vulnerability in the Easy Chat server allows access to files located outside of the “webroot” due to the possibility of trivial escaping the webroot by typing ../.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33697/Easy_chat_server.txt
Source: https://packetstormsecurity.com/files/33697/Easy_chat_server.txt.html