RCE in Phpmychat

CVE-2007-6296

PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.009 (57.5th percentile) — read the EPSS interpretation.

Affected products

  • Phpmychat — versions 0.14.5
  • N/a — versions n/a

Weakness classification (CWE)

References