NatterChat Unspecified SQL Injection...

- AV AC AU C I A
发布: 2004-10-14
修订: 2025-04-13

An unspecified SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. This vulnerability exists due to insufficient sanitization of user-supplied input. It may be possible for a remote user to inject arbitrary SQL queries into the underlying database used by the application. This could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation could result in compromise of the application, disclosure or modification of data or may permit an attacker to exploit vulnerabilities in the underlying database implementation. This issue is reported to exist in NatterChat 1.12. Other versions may be affected as well.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息