Unscored CVE-2008-6069 EUVD-2008-6039GHSA-4fm7-m3w8-94f8

SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows remote attackers to…

Published Feb 6, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter.

References

30561 third-party-advisory
20080605 e107 Plugin echat MENU Blind SQL Injection Vulnerability mailing-list
echat-e107chat-sql-injection(42883) vdb-entry