PhpMyChat SQL Injection Vulnerability
BID:14085
Info
PhpMyChat SQL Injection Vulnerability
| Bugtraq ID: | 14085 |
| Class: | Input Validation Error |
| CVE: |
CVE-2001-1357 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 02 2001 12:00AM |
| Updated: | Jul 12 2009 04:06PM |
| Credit: | Alexei Shain is credited for this issue. |
| Vulnerable: |
Nicholas Hoizey phpMyChat 0.14.4 |
| Not Vulnerable: |
Nicholas Hoizey phpMyChat 0.14.5 |
Discussion
PhpMyChat SQL Injection Vulnerability
The phpMyChat script named 'handle_inputH.php3' is prone to SQL injection attacks.
Version 0.14.4 is known to be affected. Earlier versions may also be affected.
There is no further information about this vulnerability.
The phpMyChat script named 'handle_inputH.php3' is prone to SQL injection attacks.
Version 0.14.4 is known to be affected. Earlier versions may also be affected.
There is no further information about this vulnerability.
Exploit / POC
PhpMyChat SQL Injection Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
PhpMyChat SQL Injection Vulnerability
Solution:
Upgrade the affected application to a non-vulnerable version (version 0.14.5 or higher).
Nicholas Hoizey phpMyChat 0.14.4
Solution:
Upgrade the affected application to a non-vulnerable version (version 0.14.5 or higher).
Nicholas Hoizey phpMyChat 0.14.4
-
Nicholas Hoizey PhpMyChat 0.14.5
http://prdownloads.sourceforge.net/phpmychat/phpMyChat-0.14.5.zip?down load