← Database

CVE-2008-6881

HIGH CVSS: 7.5 Published: 2009-07-30 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to (1) getChat.php, (2) getChatRoom.php, and (3) getSavedChatRooms.php.

Affected Platforms

Joompolitan Com LivechatJoomla Joomla\!

Weakness Type

CWE-89

References