CVE-2002-2391: Webchat.org Webchat

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.

Affected products

• Webchat.org Webchat: version 1.5 only
• Xoops Xoops: version 1.0 only

Published 2002-12-31. Last modified 2026-06-16.