Phpmychat Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:phpheaven:phpmychat_plus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Phpheaven (99d25aba-d2b8-5881-b990-004ed046638d) |
|---|---|
| Product | Phpmychat Plus (a4ddab2b-e17c-54c3-9eba-366f538dc0e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/phpmychat-plus/phpmychat-plus |
purl2cpe | 2026-06-01 10:16:04.016298 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-5897 |
vulnerable | 2026-06-08 04:49:21.611923 |
Details available
Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter to (1) avatar.php, (2) colorhelp_popup.php, (3) color_popup.php, (4) index.php, (5) index1.php, (6) lib/connected_users.lib.php, (7) lib/index.lib.php, and (8) phpMyChat.php3; and the (9) L parameter to logs.php. NOTE: CVE analysis suggests that vector 1 might be incorrect.
Published: 2006-11-15T15:00:00.000Z
Updated: 2024-08-07T20:04:55.881Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.