CVE-2008-6069 in eChat plugin

Summary

SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 02/05/2009
• Disclosure: 02/10/2009
• Moderation: VulDB entry created
• Entries: 1: VDB-46406
• CPE: ready
• CWE: CWE-89 (Confirmed)
• CVSS: 7.3
• EPSS: 0.00386
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-6069
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-6069
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-6069/