CVE-2021-45821

A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by a registered user. As a result, a malicious user can extract sensitive data such as usernames and passwords and in some cases use this vulnerability in order...

CVE-2021-45821

Xbtit 3.1 is affected by a blind SQL injection in the sid parameter of ajaxchat/getHistoryChatData.php, exploitable by registered users. The vulnerability arises from a missing filter/escape for SQL statements, enabling extraction of sensitive data (e.g., usernames and passwords) and, in some cas...

PT-2022-12421

Name of the Vulnerable Software and Affected Versions Xbtit version 3.1 Description A blind SQL injection issue exists via the sid parameter in the "ajaxchat/getHistoryChatData.php" file, accessible by registered users. This allows malicious users to extract sensitive data, such as usernames and...

CVE-2021-45821: Improper Neutralization of Special Elements used in an SQL Command

A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by a registered user. As a result, a malicious user can extract sensitive data such as usernames and passwords and in some cases use this vulnerability in order...