CVEvulnerability
CVE-2008-7049
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-08-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the (1) txtUsername parameter (aka Username) and (2) txtPassword parameter (aka Password) in a form generated by home.asp. NOTE: due to lack of details, it is not clear whether this is related to CVE-2004-2206.
Affected configurations
• natterchat natterchat 1.1
• natterchat natterchat 1.12
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.securityfocus.com/bid/32385 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46748 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7172 www.exploit-db.com
- https://www.exploit-db.com/exploits/7175 www.exploit-db.com
- http://www.securityfocus.com/bid/32385 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46748 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7172 www.exploit-db.com
- https://www.exploit-db.com/exploits/7175 www.exploit-db.com