CVE-2005-3991

PHPMyChat 0.14.6 is affected by multiple XSS vulnerabilities. Attackers can inject arbitrary script/HTML via the medium parameter to start_page.css.php and style.css.php, or the From parameter to users_popupL.php. The root cause is lack of input sanitization in these parameters. Impact is remote ...

CVE-2005-1619

PHPMyChat 0.14.5 is affected by multiple XSS vulnerabilities in start_page.css.php3 and style.css.php3, exploitable via the FontName parameter to inject arbitrary script/HTML. The issue is documented as CVE-2005-1619; notes indicate 0.14.5 is affected. Affected components are the PHPMyChat front-...

CVE-2008-1504

The CVE-2008-1504 entry concerns a Cross-site Scripting (XSS) vulnerability in the setup.php3 component of phpHeaven phpMyChat 0.14.5. The issue is triggered by untrusted input in the Lang parameter, allowing remote attackers to inject arbitrary web-script/HTML. The description and references ind...