EUVD-2006-2669

Malware in sbrugna...

EUVD-2006-2670

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in 1 fastchat.php and 2 fastshow.php...

CVE-2006-2670

Multiple cross-site scripting XSS vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in 1 fastchat.php and 2 fastshow.php...

CVE-2006-2671

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

Sql injection

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

CVE-2006-2670

Multiple cross-site scripting XSS vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in 1 fastchat.php and 2 fastshow.php...

CVE-2006-2670

CVE-2006-2670 affects ChatPat 1.0. The description reports multiple XSS vulnerabilities that let remote attackers inject arbitrary script/HTML via chat messages in fastchat.php and fastshow.php. Affected component: ChatPat 1.0 web chat; root cause: input-derived script execution. Impact per NVD: ...

CVE-2006-2671

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

CVE-2006-2671

CVE-2006-2671 is a SQL injection vulnerability affecting ChatPat 1.0, allowing remote attackers to execute arbitrary SQL commands via the nickname field. The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low attack complexity, no authentication, and partial integrity im...

CVE-2006-2670: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in 1 fastchat.php and 2 fastshow.php...

CVE-2006-2671: Undefined Security Weakness

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

ChatPat v1.0

ChatPat v1.0 Homepage: http://calendarscripts.info/download-3.html Description: An online chat room that lets users chat with each other. Effected files: fastchat.php fastshow.php The nickname input form doesn't sanatize user input before it adds it to the db. In turn this can cause SQL query...