CVE-2008-6069

CVE-2008-6069 describes an SQL injection in the eChat plugin 4.2 for e107, via the nick parameter in e107chat.php, when magic_quotes_gpc is disabled. The issue is exploitable remotely over the network (as per the NVD vector), potentially impacting confidentiality, integrity, and availability (par...