CVE-2005-1869

MWChat 6.x contains a PHP remote code execution via start_lobby.php through the CONFIG[MWCHAT Libs] parameter. The vulnerability affects the start_lobby.php file and can lead to arbitrary PHP execution by an attacker. The PT-2005-2826 advisory notes restricting access to start_lobby.php and avoid...

CVE-2005-3324

CVE-2005-3324 affects MWChat 6.8 (chat.php). The vulnerability is an SQL injection via the username parameter that allows remote execution of arbitrary SQL commands. Exploitation details are not provided in the supplied documents; CVSS base score is 7.5 (High). A remediation mentioned in the conn...