Vulnerability Details CVE-2004-2718
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords via a direct request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 85.0%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2004-2718
-
cpe:2.3:a:php_heaven:phpmychat:0.14.5