CVE-2004-2716 Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQL commands via the (1) sortBy, (2) sortOrder, (3) startReg, (4) U, (5) LastCheck...
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQL commands via the (1) sortBy, (2) sortOrder, (3) startReg, (4) U, (5) LastCheck , and (6) R parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php heaven phpmychat | = 0.14.5 | No fix listed |
References
- 20040422 phpMyChat 0.14.5 exploit mailing-list
- 11894 third-party-advisory
- 1010515 vdb-entry
- 7152 vdb-entry
- 10556 exploit vdb-entry
- phpmychat-sql-injection(16442) vdb-entry