CVE-2004-2717: PHP Heaven Phpmychat

Low severity, CVSS 2.6. EPSS: 2.4% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the (1) sheet and (2) What parameters.

Affected products

• PHP Heaven Phpmychat: version 0.14.5 only

Published 2004-12-31. Last modified 2026-06-16.