Unscored CVE-2007-6296 EUVD-2007-6263GHSA-32r3-r3v8-gffr

PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via …

Published Dec 10, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter.

References

20071204 RFI and Multiple XSS in PhpMyChat mailing-list
3426 third-party-advisory