CVE-2007-2477

Name of the Vulnerable Software and Affected Versions phpMyChat version 0.14.5

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter in the phpMyChat.php3 file. However, it has been disputed by multiple third parties because the $ChatPath variable is set to a constant value.

Recommendations For phpMyChat version 0.14.5, consider restricting access to the phpMyChat.php3 file to minimize the risk of exploitation. As a temporary workaround, avoid using the ChatPath parameter in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.