← Database

CVE-2002-2391

HIGH CVSS: 7.5 Published: 2002-12-31 Modified: 2026-06-16

Description

SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.

Affected Platforms

Webchat.Org WebchatXoops Xoops

Weakness Type

CWE-89

References