PT-2007-4792 · Webchat · Wechat
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
WebChat version 0.78
Description
A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the
rid parameter in the "login.php" file.Recommendations
For WebChat version 0.78, consider restricting access to the
login.php file until a patch is available, and avoid using the rid parameter in this context to minimize the risk of exploitation.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Wechat