PT-2004-3608 · Phpmychat · Phpmychat

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2718

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHPMyChat version 0.14.5

Description The issue allows attackers to obtain sensitive information, including database passwords, by directly requesting the setup.php3 file, which is not removed or protected after installation.

Recommendations For PHPMyChat version 0.14.5, remove or protect the setup.php3 file after installation to prevent unauthorized access.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2004-2718

Affected Products

Phpmychat

References · 4

• 🔥 https://exploit-db.com/exploits/703 · Exploit
• http://secunia.com/advisories/11894 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2718 · Security Note
• http://securiteam.com/unixfocus/6D00S0KC0S.html · Note