Sql injection

SQL injection vulnerability in askchat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatroomsID parameter...

CVE-2010-1918

CVE-2010-1918 affects eFront (versions up to 3.6.2 and earlier). The vulnerability is an SQL injection in the web application’s ask_chat.php, exploitable via the chatrooms_ID parameter. This allows remote attackers to execute arbitrary SQL commands on the backend. The published metrics assign a C...

CVE-2010-1918

SQL injection vulnerability in askchat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatroomsID parameter...

CVE-2010-1918: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in askchat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatroomsID parameter...