https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 13:00:44 +0000 https://db.gcve.eu/vuln/fkie_cve-2008-7210 <p>directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a numeric parameter with a value matching the s parameter&#39;s hash value, which prevents the associated $_GET[&#34;s&#34;] variable from being unset. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in AJChat.</p> <p>directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a numeric parameter with a value matching the s parameter&#39;s hash value, which prevents the associated $_GET[&#34;s&#34;] variable from being unset. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in AJChat.</p> https://db.gcve.eu/vuln/fkie_cve-2008-7210 https://db.gcve.eu/vuln/ghsa-j43x-42f5-5825 <p>directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a numeric parameter with a value matching the s parameter&#39;s hash value, which prevents the associated $_GET[&#34;s&#34;] variable from being unset. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in AJChat.</p> <p>directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a numeric parameter with a value matching the s parameter&#39;s hash value, which prevents the associated $_GET[&#34;s&#34;] variable from being unset. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in AJChat.</p> https://db.gcve.eu/vuln/ghsa-j43x-42f5-5825 https://db.gcve.eu/vuln/gsd-2008-7210 gsd-2008-7210 https://db.gcve.eu/vuln/gsd-2008-7210