Lucene search
HistoryOct 06, 2007 - 9:00 p.m.
CVE-2004-2716
cve-2004-2716
sql injection
phpmychat
remote attackers
arbitrary sql commands
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.7%
Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQL commands via the (1) sortBy, (2) sortOrder, (3) startReg, (4) U, (5) LastCheck , and (6) R parameters.
Affected configurations
Node
php_heavenphpmychatMatch0.14.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| php_heaven:phpmychat | php heaven phpmychat | eq | 0.14.5 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.7%
Related for CVE-2004-2716