← Back

Php121 Instant Messenger

php121_instant_messenger

Vendor: Php121 • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-1908
1Php121
1Php121 Instant Messenger
Apr 23, 2026
Apr 10, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which i...Show more
PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which is accessed by the file_exists function.Show less
CVE-2006-1828
1Php121
1Php121 Instant Messenger
Apr 16, 2026
Apr 19, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE para...Show more
SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE parameter, which is used in multiple files including php121login.php. NOTE: the code execution occurs because the SQL query results are used in an include statement.Show less