CVE Feed

    Dashboard / CVE / CVE-2006-1669

    CVE-2006-1669

    SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval() call, but since the username originated from the SQL injection, it could be a resultant issue.

    Published:Apr 7, 2006
    Last Modified:Apr 16, 2026
    EPS:Apr 7, 2006
    EPSS Score:0.00938
    CVSS Score:6.4

    Affected Products

    Vendor
    Phpheaven
    Product
    Phpmychat

    Exploits

    http://www.securityfocus.com/bid/17382http://www.securityfocus.com/bid/17382

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2008-1504 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers t…
    CVE-2006-5898 (CVSS 5) — Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows re…
    CVE-2006-5088 (CVSS 7.5) — PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote a…
    CVE-2005-3991 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbit…
    CVE-2005-1619 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2…
    CVE-2001-1358 (CVSS 7.2) — Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by spe…
    CVE-2001-1357 (CVSS 7.5) — Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) in…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High