← Back

Mwchat

mwchat

Vendor: Appindex • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Appindex
1Mwchat
Apr 16, 2026
Oct 27, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter.
1Appindex
1Mwchat
Apr 16, 2026
Jun 7, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in start_lobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIG[MWCHAT_Libs] parameter.