Vulnerabilities

TI-2008-05763 CVE-2008-6069 · GHSA-4fm7-m3w8-94f8

SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when…

LOW 32

SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00988 Published 2009-02-06 No fix listed CWE-89

TI-2008-01912 CVE-2008-1989 · GHSA-4x34-22jv-cj7q

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0…

MEDIUM 49

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path p…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03529 Published 2008-04-27 No fix listed CWE-94

Vulnerabilities

Filters

SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when…

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0…