webchat vulnerabilities and fixes

Recent CVEs affecting webchat, with upgrade or downgrade steps. 3 tracked.

webchat has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-07-03. Highest priority: CVE-2007-0485 (score 55/100).

• CVE-2007-3534 HIGH 7.5 DOWNGRADE SQL injection vulnerability in login.php in WebChat 0.78 allows remote attackers to execute arbitrary SQL comm
• CVE-2007-0485 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbi
• CVE-2002-2391 HIGH 7.5 DOWNGRADE DOWNGRADE SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execu

FAQ

How do I fix webchat vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is webchat being exploited right now?

None of the tracked webchat CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which webchat CVE should I patch first?

CVE-2007-0485 currently ranks highest (55/100): PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbi.

RSS feed for webchat · ← Back to latest CVEs