CVE-2002-2391
published 2002-12-31CVE-2002-2391: SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid…
PriorityP427high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.15%
62.9th percentile
SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| webchat.org | webchat | — | — |
| xoops | xoops | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/bugtraq/2002-11/0136.htmlhttp://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00258.htmlhttp://www.iss.net/security_center/static/10606.phphttp://www.securityfocus.com/bid/6165http://archives.neohapsis.com/archives/bugtraq/2002-11/0136.htmlhttp://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00258.htmlhttp://www.iss.net/security_center/static/10606.phphttp://www.securityfocus.com/bid/6165
2002-12-31
Published