NetSight
IP …
high7.5

CVE-2002-2391

SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid paramete…

Impact

SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.

Affected products

VendorProductAffected versions
Webchat.OrgWebchat
Version 1.5
XoopsXoops
Version 1.0

Weakness classification

CWE-89

References