PT-2007-3801 · Phpmychat · Phpmychat

Name of the Vulnerable Software and Affected Versions: phpMyChat version 0.14.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter in the phpMyChat.php3 file. However, it has been disputed by multiple third parties because the $ChatPat...

CVE-2007-2477: Undefined Security Weakness

PHP remote file inclusion vulnerability in phpMyChat.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter. NOTE: this has been disputed by multiple third parties and CVE because $ChatPath is set to a constant value...

CVE-2006-5898: Undefined Security Weakness

Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ChatPath parameter...

CVE-2006-5897: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the ChatPath parameter to 1 avatar.php, 2 colorhelppopup.php, 3 colorpopup.php, 4 index.php, 5 index1.php, 6 lib/connectedusers.lib.php, 7...

phpmychatPlus19.txt

a Title : PhpMyChat Plus = 1.9 Multiple Source Code Disclosure Vulnerabilities Author : ajann Dork : phpMyChat plus Vuln; Files avatar.php colorhelppopup.php colorpopup.php index.php index1.php /lib/connectedusers.lib.php /lib/index.lib.php logs.php phpMyChat.php3 /Files Code,1...

phpMyChat-0.1.txt

SolpotCrew Community phpMyChat 0.1 ChatPath Remote File Inclusion vendor : http://www.phpheaven.net/phpmychat:home Bug Found By :Solpot a.k.a k. Hasibuan 26-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-09.txt Greetz: choi , h4ntu , Ibnusina , r4dja ,...

PT-2006-5826 · Phpmychat · Phpmychat

Name of the Vulnerable Software and Affected Versions: phpMyChat version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter in the connected users.lib.php3 file. Recommendations: For phpMyChat version 0.1, consider restricting acce...

CVE-2006-5088: Undefined Security Weakness

PHP remote file inclusion vulnerability in connectedusers.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter...