Approved changes feed: RSS · Atom

cpe:2.3:a:phpopenchat:phpopenchat:2.3.4:*:*:*:*:*:*:*

part: a version: 2.3.4 update: *

VendorPhpopenchat (a8a5bf1b-94a9-5b4d-a4d9-2cd66b17b546)
ProductPhpopenchat (da4e1010-2654-5f6a-8cda-05e7e1b3567d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/phpopenchat purl2cpe 2026-06-01 10:11:41.956281

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4677 vulnerable 2026-06-08 04:49:18.528591 Details available
PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the _REQUEST parameters were dynamically unset at the beginning of the file. Another researcher noted, and CVE agrees, that the unset PHP function can be bypassed (CVE-2006-3017). If this issue is due to a vulnerability in PHP, then it should be excluded from CVE
Published: 2006-09-11T17:00:00.000Z
Updated: 2024-08-07T19:23:40.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0862 vulnerable 2026-06-08 04:48:13.853805 Details available
Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter to (1) poc_loginform.php or (2) phpbb/poc.php, the poc_root_path parameter to (3) phpbb/poc.php, (4) phpnuke/ENGLISH_poc.php, (5) phpnuke/poc.php, or (6) yabbse/poc.php, or (7) the sourcedir parameter to yabbse/poc.php.
Published: 2005-03-24T05:00:00.000Z
Updated: 2024-08-07T21:28:28.904Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.