Sql injection

2010-05-1211:46:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

JSON

SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_ID parameter.

CPENameOperatorVersion
efronteq3.1.4
efronteq3.1.3
efronteq3.6
efronteq3.1.0
efrontle3.6.2
efronteq3.6.1
efronteq3.5.5
efronteq3.5.0 beta1
efronteq3.5.2
efronteq3.5.0 beta3

Name	Operator	Version
efront	eq	3.1.4
efront	eq	3.1.3
efront	eq	3.6
efront	eq	3.1.0
efront	le	3.6.2
efront	eq	3.6.1
efront	eq	3.5.5
efront	eq	3.5.0 beta1
efront	eq	3.5.2
efront	eq	3.5.0 beta3

Rows per page:

1-10 of 171

References

osvdb.org/64506

packetstormsecurity.org/1005-exploits/MOPS-2010-018.pdf

secunia.com/advisories/39728

www.php-security.org/2010/05/09/mops-2010-018-efront-ask_chat-chatrooms_id-sql-injection-vulnerability/index.html

www.securityfocus.com/bid/40032

www.vupen.com/english/advisories/2010/1101