CVE-2006-5898: Phpheaven Phpmychat

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter.

Affected products

• Phpheaven Phpmychat: up to and including 0.14.5

Published 2006-11-15. Last modified 2026-06-16.