CVE-2004-2717
PHPMyChat 0.14.5 - Authenticated Path Traversal via Sheet or What Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-2717. PoCs published by HEX.
AI-analyzed exploit summary The writeup describes multiple vulnerabilities in phpMyChat, including HTML injection, SQL injection, authentication bypass, and file disclosure via directory traversal. It provides example URIs for exploiting the file disclosure vulnerability but does not include executable exploit code.
Description
Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the (1) sheet and (2) What parameters.
Exploits (1)
The writeup describes multiple vulnerabilities in phpMyChat, including HTML injection, SQL injection, authentication bypass, and file disclosure via directory traversal. It provides example URIs for exploiting the file disclosure vulnerability but does not include executable exploit code.