Approved changes feed: RSS · Atom

cpe:2.3:a:ciprianmp:phpmychat_plus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCiprianmp (251d1548-8794-5c50-8e47-f1a026c22272)
ProductPhpmychat Plus (0bcbd74d-ea1a-5c2a-b8c9-857b850edf10)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37151 vulnerable 2026-06-08 05:25:50.250078 phpMyChat Plus 1.98 'deluser.php' SQL Injection
HIGH (8.2)
phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmc_username parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to extract sensitive database information by crafting malicious payloads in the username field.
Published: 2026-02-05T15:25:22.320Z
Updated: 2026-07-15T01:24:28.498Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.