Vulnerabilities

TI-2018-04325 CVE-2018-5954 · GHSA-v75f-3g6x-5hr3

phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by…

MEDIUM 44

phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.08933 Published 2018-01-25 No fix listed CWE-400

TI-2011-03334 CVE-2011-3777 · GHSA-ww8g-4hm5-m22g

phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct…

LOW 25

phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/zilveer/style.css.php and ce…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01242 Published 2011-09-24 No fix listed CWE-200

TI-2008-03288 CVE-2008-3428 · GHSA-5f64-wwgv-qhfq

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to…

LOW 31

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01158 Published 2008-07-31 No fix listed CWE-287

Vulnerabilities

Filters

phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by…

phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct…

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to…