Lucene search
+L

2 matches found

NVD
NVD
added 2026/02/05 4:15 p.m.9 views

CVE-2020-37151

phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmcusername parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to extract sensitive database...

8.8CVSS0.00383EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/02/05 3:25 p.m.6 views

CVE-2020-37151

phpMyChat Plus 1.98 contains a SQL injection vulnerability in the deluser.php page through the pmcusername parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to extract sensitive database...

8.8CVSS5.6AI score0.00383EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder