Skip to content
Noroxi

phpheaven records

9 published records for vendor phpheaven.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    9 records
    • CVE-2006-5088
      31Monitor

      PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary

      HighCVSS 7.5No exploitEPSS 2%

      phpheaven · phpmychatSep 29, 2006

    • CVE-2001-1357
      30Monitor

      Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown cons

      HighCVSS 7.5No exploitEPSS 1%

      phpheaven · phpmychatFeb 7, 2001

    • CVE-2001-1358
      28Monitor

      Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library f

      HighCVSS 7.2No exploitEPSS 1%

      phpheaven · phpmychatFeb 7, 2001

    • CVE-2006-1669
      25Monitor

      SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitra

      MediumCVSS 6.4No exploitEPSS 2%

      phpheaven · phpmychatApr 7, 2006

    • CVE-2006-5897
      21Monitor

      Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a ..

      MediumCVSS 5.0No exploitEPSS 2%

      phpheaven · phpmychat plusNov 15, 2006

    • CVE-2006-5898
      20Monitor

      Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitra

      MediumCVSS 5.0No exploitEPSS 2%

      phpheaven · phpmychatNov 15, 2006

    • CVE-2005-3991
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web script or HTML via th

      MediumCVSS 4.3Proof of conceptEPSS 2%

      phpheaven · phpmychatDec 4, 2005

    • CVE-2005-1619
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.css.php3 in PHPMyChat

      MediumCVSS 4.3Proof of conceptEPSS 2%

      phpheaven · phpmychatMay 16, 2005

    • CVE-2008-1504
      17Monitor

      Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers to inject arbitrary web script

      MediumCVSS 4.3Proof of conceptEPSS 1%

      phpheaven · phpmychatMar 25, 2008