Description (CNA)
Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vulnerability and extract data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Bylancer / Zechat | affected 1.5 |
CWE
CWE-89
References
- https://www.exploit-db.com/exploits/44685
- https://bylancer.com
- https://www.vulncheck.com/advisories/zechat-sql-injection-via-v-parameter-time-based-blind
ADP enrichment
No English description supplied.
No references supplied.