Approved changes feed: RSS · Atom
cpe:2.3:a:php_heaven:phpmychat:0.14.5:*:*:*:*:*:*:*part: a version: 0.14.5 update: *
| Vendor | Php Heaven (4bcca6f4-5fd4-5a68-a7b8-702de3665233) |
|---|---|
| Product | Phpmychat (8da96fee-d5dd-5273-ad09-a5cbfb3c0ebf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/phpmychat-plus/phpmychat-plus |
purl2cpe | 2026-06-01 10:16:18.266013 |
pkg:sourceforge/phpmychat |
purl2cpe | 2026-06-01 10:16:18.266016 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-6297 |
vulnerable | 2026-06-08 04:50:08.432793 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML via the (1) LIMIT parameter to chat/deluser.php3, the (2) Link parameter to chat/edituser.php3, or the (3) LastCheck or (4) B parameter to chat/users_popupL.php3. NOTE: the FontName vectors for start_page.css.php3 and style.css.php3 are already covered by CVE-2005-1619. The medium vectors for start_page.css.php3 (start_page.css.php) and style.css.php3 (style.css.php), and the From vector for users_popupL.php3 (users_popupL.php), are already covered by CVE-2005-3991.
Published: 2007-12-10T18:00:00.000Z
Updated: 2024-08-07T16:02:36.282Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2718 |
vulnerable | 2026-06-08 04:48:10.661792 |
Details available
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords via a direct request.
Published: 2007-10-06T21:00:00.000Z
Updated: 2024-09-17T02:26:30.454Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2717 |
vulnerable | 2026-06-08 04:48:10.661543 |
Details available
Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the (1) sheet and (2) What parameters.
Published: 2007-10-06T21:00:00.000Z
Updated: 2024-08-08T01:36:25.325Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2716 |
vulnerable | 2026-06-08 04:48:10.661244 |
Details available
Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQL commands via the (1) sortBy, (2) sortOrder, (3) startReg, (4) U, (5) LastCheck , and (6) R parameters.
Published: 2007-10-06T21:00:00.000Z
Updated: 2024-08-08T01:36:25.211Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2715 |
vulnerable | 2026-06-08 04:48:10.660858 |
Details available
edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false.
Published: 2007-10-06T21:00:00.000Z
Updated: 2024-08-08T01:36:25.293Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.