20140805 Pro Chat Rooms v8.2.0 - Multiple Vulnerabilitiesmailing list
http://archives.neohapsis.com/archives/bugtraq/2014-08/0026.html CVE-2014-5275
Pro Chat Rooms 8.2.0 - Multiple Vulnerabilities
Record summary
CVE-2014-5275 has a selected CVSS score of 6.5; EIP currently links 1 catalogued exploit.
Description
Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) password, (2) email, or (3) id parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPro Chat Rooms 8.2.0 - Multiple VulnerabilitiesExploitDB exploitby Mike ManzottiNot analyzed1 file
References
6packetstormsecurity.com
http://packetstormsecurity.com/files/127775/Pro-Chat-Rooms-8.2.0-XSS-Shell-Upload-SQL-Injection.html 34275exploit
http://www.exploit-db.com/exploits/34275 109829vdb entry
http://www.osvdb.org/109829 prochatrooms-functions-sql-injection(95127)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/95127 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-5275