PT-2018-17265

CVE-2018-5979

·

Publicado

2018-01-24

·

Atualizado

2018-02-07

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Wchat Fully Responsive PHP AJAX Chat Script version 1.5
Description: The issue exists due to SQL Injection in the login.php file, specifically via the User field. This allows for potential exploitation.
Recommendations: For Wchat Fully Responsive PHP AJAX Chat Script version 1.5, consider validating and sanitizing user input in the login.php file to prevent SQL Injection attacks, specifically for the User field. As a temporary workaround, restrict access to the login.php file until a proper fix is applied.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Identificadores relacionados
CVE-2018-5979
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com