CVE-2004-2716

CVE-2004-2716 describes multiple SQL injection vulnerabilities in PHPMyChat 0.14.5’s usersL.php3, allowing remote attackers to execute arbitrary SQL commands via parameters (sortBy, sortOrder, startReg, U, LastCheck, R). The underlying issue is unsafely constructed SQL queries in that script, ena...