CVE-2007-2477: Undefined Security Weakness

PHP remote file inclusion vulnerability in phpMyChat.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter. NOTE: this has been disputed by multiple third parties and CVE because $ChatPath is set to a constant value...

CVE-2007-2477

The CVE-2007-2477 issue affects phpMyChat 0.14.5, specifically the phpMyChat.php3 file where a URL provided in the {ChatPath} parameter can lead to remote code execution (PHP RFI). The root cause is the use of ChatPath in constructing or including remote content; however, this has been disputed b...

phpMyChat-0.14.5

----------------------------------------------------------------------------------------------------------------------------------------------------------- Script Name : phpMyChat-0.14.5 Download : http://www.easy-script.com/compt.php?id=1701 Coded by : KaRTaL Contact : k4rtalatgmaildotcom...

CVE-2006-7001

Directory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the L parameter, a different issue than CVE-2006-5897. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-7001

Directory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the L parameter, a different issue than CVE-2006-5897. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-7001

CVE-2006-7001 describes a directory traversal in PhpMyChat Plus 1.9 and earlier. The vulnerable component is the avatar.php handler, where an attacker can supply a "L" parameter containing ".." to read arbitrary files on the server. This mirrors the established issue family in PhpMyChat Plus 1.9 ...

CVE-2006-7001: Undefined Security Weakness

Directory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the L parameter, a different issue than CVE-2006-5897. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-5898

Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ChatPath parameter...

CVE-2006-5897

Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the ChatPath parameter to 1 avatar.php, 2 colorhelppopup.php, 3 colorpopup.php, 4 index.php, 5 index1.php, 6 lib/connectedusers.lib.php, 7...

CVE-2006-5897

Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the ChatPath parameter to 1 avatar.php, 2 colorhelppopup.php, 3 colorpopup.php, 4 index.php, 5 index1.php, 6 lib/connectedusers.lib.php, 7...

CVE-2006-5897

CVE-2006-5897 affects PhpMyChat Plus 1.9 and earlier, with multiple directory-traversal paths exposed via ChatPath (to avatar.php, colorhelp_popup.php, color_popup.php, index.php, index1.php, lib/connected_users.lib.php, lib/index.lib.php, phpMyChat.php3) and the L parameter to logs.php. The unde...

CVE-2006-5898

Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ChatPath parameter...

CVE-2006-5898

CVE-2006-5898 describes a directory traversal vulnerability in PhpMyChat (versions up to 0.14.5) affecting the localization/languages.lib.php3 component. An attacker can supply a ". ." sequence in the ChatPath parameter to read arbitrary files on the server. The issue arises from improper validat...

CVE-2006-5898: Undefined Security Weakness

Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ChatPath parameter...

CVE-2006-5897: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the ChatPath parameter to 1 avatar.php, 2 colorhelppopup.php, 3 colorpopup.php, 4 index.php, 5 index1.php, 6 lib/connectedusers.lib.php, 7...

PhpMyChat Plus <= 1.9 Multiple Source Code Disclosure Vulnerabilities

a Title : PhpMyChat Plus = 1.9 Multiple Source Code Disclosure Vulnerabilities Author : ajann Dork : phpMyChat plus Vuln; Files avatar.php colorhelppopup.php colorpopup.php index.php index1.php /lib/connectedusers.lib.php /lib/index.lib.php logs.php phpMyChat.php3 /Files Code,1...

PhpMyChat <= 0.14.5 Source Code Disclosure Vulnerability

Title : PhpMyChat = 0.14.5 Source Code Disclosure Vulnerability Author : ajann Dork : phpMyChat 0.14.5 , phpMyChat Vuln; File localization/languages.lib.php3 /File Code,1 languages.lib.php3 Error: .. .... require"./$ChatPathconfig/config.lib.php3";...

phpmychatPlus19.txt

a Title : PhpMyChat Plus = 1.9 Multiple Source Code Disclosure Vulnerabilities Author : ajann Dork : phpMyChat plus Vuln; Files avatar.php colorhelppopup.php colorpopup.php index.php index1.php /lib/connectedusers.lib.php /lib/index.lib.php logs.php phpMyChat.php3 /Files Code,1...

phpmychat0145traverse.txt

Title : PhpMyChat = 0.14.5 Source Code Disclosure Vulnerability Author : ajann Dork : phpMyChat 0.14.5 , phpMyChat Vuln; File localization/languages.lib.php3 /File Code,1 languages.lib.php3 Error: .. .... require"./$ChatPathconfig/config.lib.php3";...

PHPMyChat 0.140.15 - Languages.Lib.php Local File Inclusion

PHPMyChat 0.140.15 - Languages.Lib.php Local File Inclusion source: https://www.securityfocus.com/bid/20962/info phpMyChat is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files a...