medium4.3Public exploit code
CVE-2004-2718
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpMyChat 0.14.5 - Remote Improper File Permissions2004-12-22 · webapps · php · Verified
Impact
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Heaven | Phpmychat | Version 0.14.5 |