Unscored CVE-2006-1962 EUVD-2006-1962GHSA-2m48-r7v9-8g4w

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username fiel…

Published Apr 21, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (login parameter) to main.php.

References

pcpin-chat-main-sql-injection(25961) vdb-entry
20060604 Re: PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn mailing-list
ADV-2006-1441 vdb-entry
1015968 vdb-entry
20060419 PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn mailing-list
17632 vdb-entry
http://retrogod.altervista.org/pcpin_504_xpl.html
19708 third-party-advisory