CVE-2007-6296

CVE-2007-6296 : PHP remote file inclusion in phpMyChat 0.14.5, via a URL in the From parameter of users_popupL.php3, allows remote attackers to execute arbitrary PHP code. The provided sources confirm an RFI vulnerability without detailing a vendor patch or fixed version. The underlying issue is ...

CVE-2007-6297

CVE-2007-6297 details multiple XSS vulnerabilities in PHPMyChat (0.14.5/0.14.6) that allow remote attackers to inject arbitrary script/html via parameters: LIMIT (chat/deluser.php3), Link (chat/edituser.php3), and LastCheck or B (chat/users_popupL.php3). The entry notes related vectors (FontName ...

Remote file inclusion

PHP remote file inclusion vulnerability in phpMyChat.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter. NOTE: this has been disputed by multiple third parties and CVE because $ChatPath is set to a constant value...

phpMyChat-0.14.5

----------------------------------------------------------------------------------------------------------------------------------------------------------- Script Name : phpMyChat-0.14.5 Download : http://www.easy-script.com/compt.php?id=1701 Coded by : KaRTaL Contact : k4rtalatgmaildotcom...

phpmychat0145traverse.txt

Title : PhpMyChat = 0.14.5 Source Code Disclosure Vulnerability Author : ajann Dork : phpMyChat 0.14.5 , phpMyChat Vuln; File localization/languages.lib.php3 /File Code,1 languages.lib.php3 Error: .. .... require"./$ChatPathconfig/config.lib.php3";...

CVE-2006-1669

SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval...

phpmychat0145.txt

www.phpheaven.net/ Vulnerable versions: PHPMyChat 0.14.5 Proof of concept: http://www.example.com/chat/config/start-page.css.php3?Charset=iso-8859-1&medium=10&FontName=var%20test=1;alerttest;...