Vulnerability in Php Heaven Phpmychat

CVE-2004-2718

PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords via a direct request.

EPSS: 0.017 (74.2th percentile) — read the EPSS interpretation.

Affected products

Php_heaven Phpmychat — versions 0.14.5
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_MISC)