CVE-2018-5979: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

PT-2018-17265

Name of the Vulnerable Software and Affected Versions: Wchat Fully Responsive PHP AJAX Chat Script version 1.5 Description: The issue exists due to SQL Injection in the login.php file, specifically via the User field. This allows for potential exploitation. Recommendations: For Wchat Fully...

Wchat 1.5 SQL Injection

Exploit Title: Wchat - Fully Responsive PHP AJAX Chat Script 1.5 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://bylancer.com/ Software Link: https://codecanyon.net/item/wchat-fully-responsive-phpajax-chat/18047319 Version: 1.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...