Phpfreechat

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Phpfreechat records in CISA KEV

No Phpfreechat vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpfreechat 3 records MEDIUM

Records

3 records in Phpfreechat · all components

TI-2018-04325 CVE-2018-5954 · GHSA-v75f-3g6x-5hr3

phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by…

MEDIUM 44

phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.08933 Published 2018-01-25 No fix listed CWE-400

TI-2008-03288 CVE-2008-3428 · GHSA-5f64-wwgv-qhfq

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to…

LOW 31

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01158 Published 2008-07-31 No fix listed CWE-287

TI-2011-03334 CVE-2011-3777 · GHSA-ww8g-4hm5-m22g

phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct…

LOW 25

phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/zilveer/style.css.php and ce…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01242 Published 2011-09-24 No fix listed CWE-200

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0