CVE-2007-6296: Phpmychat

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter.

Affected products

• Phpmychat Phpmychat: version 0.14.5 only

Published 2007-12-10. Last modified 2026-06-16.