Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026

CVE-2002-2391

Description

SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.

Affected products

Webchat.org/Webchat
cpe:2.3:a:webchat.org:webchat:1.5:*:*:*:*:*:*:*
XOOPS/Xoops
cpe:2.3:a:xoops:xoops:1.0:*:*:*:*:*:*:*
XOOPS/WebChatllm-create
Range: = 1.5 (included in XOOPS 1.0)

Patches

Vulnerability mechanics

References

www.iss.net/security_center/static/10606.phpnvdPatch
archives.neohapsis.com/archives/bugtraq/2002-11/0136.htmlnvdExploit
cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00258.htmlnvd
www.securityfocus.com/bid/6165nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000