PatchTheCVEphp heaven vulnerabilities
Recent CVEs affecting php heaven products. 5 tracked.
php heaven has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-12-10. Highest priority: CVE-2004-2715 (score 54/100).
- CVE-2007-6297 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbit
- CVE-2004-2718 MEDIUM 4.3 DOWNGRADE PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain se
- CVE-2004-2717 LOW 2.6 DOWNGRADE Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with adm
- CVE-2004-2716 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute ar
- CVE-2004-2715 HIGH 7.5 DOWNGRADE edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative priv
FAQ
How do I fix php heaven vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is php heaven being exploited right now?
None of the tracked php heaven CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which php heaven CVE should I patch first?
CVE-2004-2715 currently ranks highest (54/100): edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative priv.