CVE-2020-9265

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username

Critical · published February 18, 2020

CVSS v3.0
9.3
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username.

The record
Technical detail
CVSS v3.0
9.3 · CRITICAL
Vector
CVSS:3.0/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01457 · 73.3th percentile
Published
2020-02-18T17:22Z
EPSS history
Timeline
  • 18 FEB 17:22Z
    phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username
    cvelistv5