← Database

CVE-2009-2142

HIGH CVSS: 7.5 Published: 2009-06-22 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) senha parameters.

Affected Platforms

Zipstore Zip Store Chat

Weakness Type

CWE-89

References