← Back

Flat Chat

flat_chat

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Flat Chat
flat_chat

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Flat Chat
1Flat Chat
Apr 23, 2026
Mar 10, 2007
N/A· v4
N/A· v3
10.0 HIGH· v2
Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php....Show more
Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php. NOTE: some of these details are obtained from third party information.Show less