Unscored CVE-2002-2391 EUVD-2002-2369GHSA-jx9c-x6x6-hq5m

SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via…

Published Oct 31, 2007 · Updated Sep 16, 2024 · Assigned by mitre

Description

SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.

References

20021112 WebChat for XOOPS RC3 SQL INJECTION mailing-list
xoops-webchat-sql-injection(10606) vdb-entry
6165 vdb-entry
20021116 XOOPS WebChat module - patch UPDATE mailing-list