CVE-2014-5275

CVE-2014-5275 describes multiple SQL injection vulnerabilities in Pro Chat Rooms Text Chat Rooms version 8.2.0, specifically within the includes/functions.php file. These flaws allow remote authenticated users to execute arbitrary SQL commands by manipulating the password, email, or id parameters. With a CVSS score of 6.5, this vulnerability is of medium severity, requiring authentication (AV:N/AC:L/Au:S) but potentially leading to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB (EDB-34275), though there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.