GCVE - cpe:2.3:a:phpheaven:phpmychat:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpheaven:phpmychat:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Phpheaven (`99d25aba-d2b8-5881-b990-004ed046638d`)
Product	Phpmychat (`beb9bd3e-ff62-5044-b520-614a5be38c7c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/phpmychat-plus/phpmychat-plus`	purl2cpe	2026-06-01 10:16:04.017702
`pkg:sourceforge/phpmychat`	purl2cpe	2026-06-01 10:16:04.017703

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-5898`	vulnerable	2026-06-08 04:49:21.613126	Details available Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter. Published: 2006-11-15T15:00:00.000Z Updated: 2024-08-07T20:04:55.956Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/30121 http://securityreason.com/securityalert/1852 http://www.securityfocus.com/archive/1/450923/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1669`	vulnerable	2026-06-08 04:48:57.752114	Details available SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval() call, but since the username originated from the SQL injection, it could be a resultant issue. Published: 2006-04-07T10:00:00.000Z Updated: 2024-08-07T17:19:49.116Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/17382 https://exchange.xforce.ibmcloud.com/vulnerabilities/25687 https://www.exploit-db.com/exploits/1646 http://securitytracker.com/id?1015873 http://www.securityfocus.com/archive/1/430358/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1358`	vulnerable	2026-06-08 04:46:19.667729	Details available Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (localization) parameter. Published: 2002-06-11T04:00:00.000Z Updated: 2024-08-08T04:51:08.220Z Open on db.gcve.eu Reference links http://www.phpheaven.net/projects/phpMyChat/changes.php3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1357`	vulnerable	2026-06-08 04:46:19.667377	Details available Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables. Published: 2002-06-11T04:00:00.000Z Updated: 2024-08-08T04:51:08.256Z Open on db.gcve.eu Reference links http://www.phpheaven.net/projects/phpMyChat/changes.php3	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.