CVE-2007-6297: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML via the 1 LIMIT parameter to chat/deluser.php3, the 2 Link parameter to chat/edituser.php3, or the 3 LastCheck or 4 B parameter to chat/userspopupL.php3. NOTE: the...

CVE-2007-6296: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in userspopupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter...