CVE-2006-5088

PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter.

• http://securityreason.com/securityalert/1654
• http://www.nyubicrew.org/adv/solpot-adv-09.txtVendor Advisory, URL Repurposed
• http://www.securityfocus.com/archive/1/447012/100/0/threaded
• http://www.securityfocus.com/bid/20219Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29180
• http://securityreason.com/securityalert/1654
• http://www.nyubicrew.org/adv/solpot-adv-09.txtVendor Advisory, URL Repurposed
• http://www.securityfocus.com/archive/1/447012/100/0/threaded
• http://www.securityfocus.com/bid/20219Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29180

Published

Sep 29, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5082Unspecified vulnerability in Sugar Suite Open Source (SugarC…
• CVE-2006-5083PHP remote file inclusion vulnerability in includes/function…
• CVE-2006-5084Format string vulnerability in the NSRunAlertPanel function …
• CVE-2006-5085Static code injection vulnerability in config.php in Blog Pi…
• CVE-2006-5086Blog Pixel Motion 2.1.1 allows remote attackers to change th…
• CVE-2006-5087Multiple PHP remote file inclusion vulnerabilities in evoBB …
• CVE-2006-5089PHP remote file inclusion vulnerability in mybic_server.php …
• CVE-2006-5090Multiple cross-site scripting (XSS) vulnerabilities in Phoen…
• CVE-2006-5091Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS …
• CVE-2006-5092PHP remote file inclusion vulnerability in navigation/menu.p…
• CVE-2006-5093PHP remote file inclusion vulnerability in index.php in Tagm…
• CVE-2006-5094PHP remote file inclusion vulnerability in includes/function…