CVE-2007-0485

CVE-2007-0485 describes a PHP remote file inclusion in WebChat 0.77. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the WEBCHATPATH parameter of defines.php. Documents confirm the affected component is WebChat and the vulnerability is triggered via a remote includ...

CVE-2002-2391

The CVE-2002-2391 entry describes a SQL injection in WebChat 1.5 (included with XOOPS 1.0) via the roomid parameter in index.php, enabling remote arbitrary SQL commands. The connected documents provide concrete details (affected software and vulnerable parameter) but do not include exploitation s...