Description (CNA)
Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve table and column names.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Bylancer / Zechat | affected 1.5 |
CWE
CWE-89
References
- https://www.exploit-db.com/exploits/44685
- https://bylancer.com
- https://www.vulncheck.com/advisories/zechat-sql-injection-via-hashtag-parameter
ADP enrichment
No English description supplied.
No references supplied.