Description
Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vulnerability and extract data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bylancer | Zechat | 1.5 | — |
References
- ExploitDB-44685 exploit
- Official Product Homepage product
- VulnCheck Advisory: Zechat 1.5 SQL Injection via v parameter (time-based blind) third-party-advisory