CVE-2014-5275

Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) password, (2) email, or (3) id parameter.

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

1.95% chance of exploitation in the next 30 days, 79th percentile

Published

2014-10-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/34275

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/34275

References

• CVE Record
• NVD entry

Related

• CVE-2014-5266
• CVE-2014-5276
• CVE-2014-5265
• CVE-2014-5284
• CVE-2014-5258
• CVE-2014-5287