CVE-2014-5275 in Text Chat Rooms
Summary
Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) password, (2) email, or (3) id parameter.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
08/16/2014
Disclosure
10/20/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 72486 | Pro Chat Rooms Text Chat Rooms sql injection | 89 | High | Official fix | CVE-2014-5275 |