PT-2005-4312 · Chipmunk · Chipmunk Directory Script

Name of the Vulnerable Software and Affected Versions: Chipmunk Directory script affected versions not specified Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the entryID parameter in the recommend.php file...

CVE-2005-3514: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID parameter to 1 newtopic.php, 2 quote.php, 3 index.php, and 4 reply.php...

CVE-2005-3516: Undefined Security Weakness

Cross-site scripting XSS vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to inject arbitrary web script or HTML via the entryID parameter...

PT-2005-4311 · Chipmunk · Chipmunk Topsites Script

Name of the Vulnerable Software and Affected Versions: Chipmunk Topsites script affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the ID parameter in the recommend.ph...

PT-2005-4313 · Chipmunk Scripts · Chipmunk Scripts Guestbook

Name of the Vulnerable Software and Affected Versions: Chipmunk Scripts Guestbook affected versions not specified Description: The issue allows remote attackers to obtain the installation path of the script by causing an error message to be displayed. This can be achieved through a URL that...

CVE-2005-3515: Undefined Security Weakness

Cross-site scripting XSS vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

CVE-2005-3517: Undefined Security Weakness

Chipmunk Scripts Guestbook allows remote attackers to obtain the installation path of the script via a URL that causes an error message to be displayed, such as a URL that contains a single quote ' in the start parameter of index.php...

XSS & Path Disclosure in Chipmunk's products

Products: Chipmunk Forum , Topsites , Directory , Guestbook Versions: Tested: Last released of products Vendor: http://chipmunk-scripts.com Bug: XSS , Path Disclosure Exploitation: Remote --------------------------- Introduction: Chipmunk Forum is a small yet flexible and fully featured forum...

Chipmunk Forum - newtopic.php?forumID Cross-Site Scripting

Chipmunk Forum - newtopic.php?forumID Cross-Site Scripting source: https://www.securityfocus.com/bid/15149/info Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker...

Chipmunk Forum - quote.php?forumID Cross-Site Scripting

Chipmunk Forum - quote.php?forumID Cross-Site Scripting source: https://www.securityfocus.com/bid/15149/info Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker ma...

Chipmunk Forum - 'recommend.php?ID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15149/info Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

Chipmunk Forum - 'quote.php?forumID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15149/info Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

Chipmunk Forum - recommend.php?ID Cross-Site Scripting

Chipmunk Forum - recommend.php?ID Cross-Site Scripting source: https://www.securityfocus.com/bid/15149/info Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may...

Chipmunk Directory - recommend.php?entryID Cross-Site Scripting

Chipmunk Directory - recommend.php?entryID Cross-Site Scripting source: https://www.securityfocus.com/bid/15149/info Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An...

Chipmunk Forum - 'newtopic.php?forumID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15149/info Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

[SA16365] Chipmunk Forum "fontcolor" Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Chipmunk CMS 1.3 - Fontcolor Cross-Site Scripting

source: https://www.securityfocus.com/bid/14506/info Chipmunk CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to inject html and script code into the Web...

Chipmunk CMS 1.3 - Fontcolor Cross-Site Scripting

Chipmunk CMS 1.3 - Fontcolor Cross-Site Scripting source: https://www.securityfocus.com/bid/14506/info Chipmunk CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...

chipmunk.forum.txt

/==========================================/ // GHC - Chipmunk forum - ADVISORY // Product: Chipmunk Forums // URL: http://www.chipmunk-scripts.com/board // VULNERABILITY CLASS: SQL injection // RISK: hight /==========================================/ exploit at login.php enter user name as...

Chipmunk Forums - SQL Injection

Chipmunk Forums - SQL Injection /==========================================/ // GHC - Chipmunk forum - ADVISORY // Product: Chipmunk Forums // URL: http://www.chipmunk-scripts.com/board // VULNERABILITY CLASS: SQL injection // RISK: hight /==========================================/ exploit at...