PT-2009-2433 · X7 · X7 Chat

Zorlu

·

CVE-2008-6964

·

Published

2009-08-13

·

Updated

2017-09-29

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: X7 Chat version 2.0.5
Description: A SQL injection issue in the login page allows remote attackers to execute arbitrary SQL commands via the password field.
Recommendations: For X7 Chat version 2.0.5, update the software to a version that fixes this issue, or as a temporary workaround, consider restricting access to the login page to minimize the risk of exploitation.

Exploit

Fix

RCE

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-6964

Affected Products

X7 Chat