CVE-2006-1669 | BDVDB-2026-16121 Detail

Description#

SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval() call, but since the username originated from the SQL injection, it could be a resultant issue.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/17382
https://exchange.xforce.ibmcloud.com/vulnerabilities/25687
https://www.exploit-db.com/exploits/1646
http://securitytracker.com/id?1015873
http://www.securityfocus.com/archive/1/430358/100/0/threaded

Exploit#

https://www.exploit-db.com/exploits/1646

History#

Version 12006-04-07Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.