Chat System update_room.php File SQL Injection Vulnerability

Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that originates from insufficient input validation of the id/name/password parameters in the /admin/updateroom.php file. An attacker can use this vulnerability to execute arbitrary SQL commands to obtain sensitiv...

CVE-2024-13036: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/updateroom.php. The manipulation of the argument id/name/password leads to sql injection. The attack may be initiated remotely. The exploit has been...