CVE-2025-7186: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Chat System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/fetchchat.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

Code-Projects Chat System 安全漏洞

Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /user/fetchchat.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...