CVE-2008-6881 Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to (1) getChat.php, (2)...
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to (1) getChat.php, (2) getChatRoom.php, and (3) getSavedChatRooms.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joompolitan com livechat | = 1.0 | No fix listed |
References
- 33122 third-party-advisory vendor-advisory
- 32803 exploit patch vdb-entry
- livechat-getchat-sql-injection(47304) vdb-entry
- 7441 exploit