Vulnerabilities (CVE)

Filtered by vendor Phpmychat Subscribe
Filtered by product Phpmychat
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-2477 1 Phpmychat 1 Phpmychat 2024-08-07 7.5 HIGH N/A
** DISPUTED ** PHP remote file inclusion vulnerability in phpMyChat.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the {ChatPath} parameter. NOTE: this has been disputed by multiple third parties and CVE because $ChatPath is set to a constant value.
CVE-2007-6296 1 Phpmychat 1 Phpmychat 2024-02-04 5.0 MEDIUM N/A
PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter.