Echat Plugin

DATE	CVE	VULNERABILITY TITLE	RISK
2009-02-10	CVE-2008-6069	SQL Injection vulnerability in 123Flashchat Echat Plugin 4.2 SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter. network 123flashchat e107 CWE-89	6.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.