CVE-2006-1962

pcpin_chat 5.0.4 - SQL Injection via Username Field

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (login parameter) to main.php.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25961
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/436029/100/0/threaded
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1441
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015968
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/431390/100/0/threaded
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17632
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19708

Scores

EPSS 0.0151
EPSS Percentile 71.9%

Details

CWE
CWE-89
Status published
Products (11)
pcpin/pcpin_chat 3.1.5
pcpin/pcpin_chat 3.1.6
pcpin/pcpin_chat 3.1.7r
pcpin/pcpin_chat 3.2.0
pcpin/pcpin_chat 3.2.1
pcpin/pcpin_chat 3.2.3
pcpin/pcpin_chat 4.0
pcpin/pcpin_chat 5.0.1
pcpin/pcpin_chat 5.0.2
pcpin/pcpin_chat 5.0.3
... and 1 more
Published Apr 21, 2006
Tracked Since Feb 18, 2026