Multiple SQL injection vulnerabilities in A Really Simple Chat (ARSC) 3.3-rc2 allow remote attackers to execute arbitrary SQL commands via the (1) arsc_user parameter to base/admin/edit_user.php, (2) arsc_layout_id parameter in base/admin/edit_layout.php, or (3) arsc_room parameter to base/admin/edit_room.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2011-06-29T17:00:00Z

Updated: 2024-09-16T21:56:58.547Z

Reserved: 2011-05-31T00:00:00Z

Link: CVE-2011-2181

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-06-29T17:55:03.817

Modified: 2024-11-21T01:27:45.963

Link: CVE-2011-2181

cve-icon Redhat

No data.