CVE-2006-1669

no score yetEPSS 1.7%

SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval() call, but since the username originated from the SQL injection, it could be a resultant issue.

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
Published: 2006-04-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

phpheaven:phpmychat

References

http://securitytracker.com/id?1015873
http://www.securityfocus.com/archive/1/430358/100/0/threaded
http://www.securityfocus.com/bid/17382
https://exchange.xforce.ibmcloud.com/vulnerabilities/25687
https://www.exploit-db.com/exploits/1646

Check your stack JSON