CVE-2020-37151

phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmcusername parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to extract sensitive database...

CVE-2020-37151

phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmcusername parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to extract sensitive database...

PT-2020-20559

Name of the Vulnerable Software and Affected Versions phpMyChat-Plus version 1.98 Description The issue concerns multiple SQL injections against the Delete User functionality in the deluser.php file, as demonstrated by the pmc username variable. Recommendations For phpMyChat-Plus version 1.98,...

PT-2019-16000

Name of the Vulnerable Software and Affected Versions phpMyChat-Plus version 1.98 Description The issue concerns a reflected XSS vulnerability that can be exploited through JavaScript injection into the password reset URL. Specifically, the pmc username parameter in the pass reset.php URL is...