Vulnerabilities

TI-2020-19286 CVE-2020-37151 · GHSA-jm38-f2px-wcq3

phpMyChat Plus 1.98 'deluser.php' SQL Injection

HIGH 77

phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmc_username parameter that allows attackers to manipulate database queries.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00455 Published 2026-02-05 No fix listed CWE-89

TI-2020-07406 CVE-2020-9265 · GHSA-q4jx-p8j7-6rvw

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php…

LOW 39

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.01457 Published 2020-02-18 No fix listed CWE-89

TI-2019-14355 CVE-2019-19908 · GHSA-j6vq-qqp5-gwm9

phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the…

MEDIUM 47

phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.21232 Published 2019-12-20 No fix listed CWE-79

Vulnerabilities

Filters

phpMyChat Plus 1.98 'deluser.php' SQL Injection

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php…

phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the…