Phpopenchat

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:phpopenchat:phpopenchat:3.0.0:*:*:*:*:*:*:*

part: a version: 3.0.0 update: *

VendorPhpopenchat (a8a5bf1b-94a9-5b4d-a4d9-2cd66b17b546)
ProductPhpopenchat (da4e1010-2654-5f6a-8cda-05e7e1b3567d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/phpopenchat purl2cpe 2026-06-01 10:11:41.957208

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4677 vulnerable 2026-06-08 04:49:18.529091 Details available
PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers to execute arbitrary PHP code via the sourcedir parameter. NOTE: this issue was disputed by a third-party researcher who stated that the _REQUEST parameters were dynamically unset at the beginning of the file. Another researcher noted, and CVE agrees, that the unset PHP function can be bypassed (CVE-2006-3017). If this issue is due to a vulnerability in PHP, then it should be excluded from CVE
Published: 2006-09-11T17:00:00.000Z
Updated: 2024-08-07T19:23:40.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0863 vulnerable 2026-06-08 04:48:13.855548 Details available
Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via (1) the chatter parameter to regulars.php or (2) the chatter, chatter1, chatter2, chatter3, or chatter4 parameters to register.php.
Published: 2005-03-24T05:00:00.000Z
Updated: 2024-08-07T21:28:28.437Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.