CVE-2004-2715: PHP Heaven Phpmychat

High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days.

edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false.

Affected products

• PHP Heaven Phpmychat: version 0.14.5 only

Published 2004-12-31. Last modified 2026-06-16.