CVE-2004-2715

PHPMyChat 0.14.5 - Improper Authentication via do_not_login Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-2715. PoCs published by HEX.

AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in phpMyChat by manipulating form parameters to change the admin password without proper authentication. It leverages insufficient input validation in the 'edituser.php3' script.

Description

edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false.

Exploits (1)

exploitdb WORKING POC VERIFIED

by HEX · htmlwebappsphp

https://www.exploit-db.com/exploits/24216

View Code ZIP pw:eip

This exploit demonstrates an authentication bypass vulnerability in phpMyChat by manipulating form parameters to change the admin password without proper authentication. It leverages insufficient input validation in the 'edituser.php3' script.

Classification

Working Poc 90%

Attack Type

Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: phpMyChat (version not specified)

No auth needed

Prerequisites: Access to the target application's edituser.php3 endpoint

MITRE ATT&CK

T1110 - Brute Force T1078 - Valid Accounts

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/7149

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/16440

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/11894

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/10556

Exploit mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1010515

Scores

EPSS 0.0458

EPSS Percentile 90.4%

Details

CWE

CWE-287

Status published

Products (1)

php_heaven/phpmychat 0.14.5

Published Dec 31, 2004

Tracked Since Feb 18, 2026