⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-5275

MEDIUM · 6.5 CVSS Gepubliceerd: 20-10-2014 CWE-89

Beschrijving

Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) password, (2) email, or (3) id parameter.

Vendors

Prochatrooms

Affected products

Text Chat Rooms

References

archives.neohapsis.com
packetstormsecurity.com
www.exploit-db.com
www.osvdb.org
exchange.xforce.ibmcloud.com