CVE-2008-0278

no score yetEPSS 1.6%

x7 group x7 chat: no CVSS score yet. EPSS 1.6% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a sm_window action.

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2008-01-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

x7_group:x7_chat

References

http://secunia.com/advisories/28503
http://www.securityfocus.com/bid/27277
https://exchange.xforce.ibmcloud.com/vulnerabilities/39656
https://www.exploit-db.com/exploits/4907
http://secunia.com/advisories/28503

Check your stack JSON