GCVE - cpe:2.3:a:x7_group:x7_chat:2.0.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:x7_group:x7_chat:2.0.5:*:*:*:*:*:*:*

part: a version: 2.0.5 update: *

Vendor	X7 Group (`1abd22fb-5dea-5cc3-8eed-4e7fb08cc24f`)
Product	X7 Chat (`29ebe8fc-02dc-5664-bdc9-68c7e393ab78`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/spaceshiptrooper/x7chat`	purl2cpe	2026-06-01 10:15:12.400068
`pkg:github/tjchamne/x7chat`	purl2cpe	2026-06-01 10:15:12.400070

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-6964`	vulnerable	2026-06-08 04:51:05.243391	Details available SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands via the password field. Published: 2009-08-13T16:00:00.000Z Updated: 2024-08-07T11:49:02.453Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/7123 https://exchange.xforce.ibmcloud.com/vulnerabilities/46640 http://www.securityfocus.com/bid/32309	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5982`	vulnerable	2026-06-08 04:50:07.405793	Details available Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) room parameter to sources/frame.php, the (2) theme_c parameter to help/index.php, or the (3) INSTALL_X7CHATVERSION parameter to upgradev1.php. Published: 2007-11-15T00:00:00.000Z Updated: 2024-08-07T15:47:00.735Z Open on db.gcve.eu Reference links http://osvdb.org/38745 http://osvdb.org/38746 http://secunia.com/advisories/27677 http://packetstorm.linuxsecurity.com/0711-exploits/x7-xss.txt http://www.securityfocus.com/bid/26417	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.