phpMyChat version 0.14.5 suffers from remote file inclusion and multiple cross site scripting vulnerabilities.