CVE-2008-6881

Summary

Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to (1) getChat.php, (2) getChatRoom.php, and (3) getSavedChatRooms.php.

Impact & exploitability

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: http://www.securityfocus.com/bid/32803 ↗

Additional information

• NVD record
• http://www.securityfocus.com/bid/32803Patch
• http://secunia.com/advisories/33122Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47304
• https://www.exploit-db.com/exploits/7441