EUVD-2006-2669

Malware in sbrugna...

EUVD-2006-2670

Malware in sbrugna...

Sql injection

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in 1 fastchat.php and 2 fastshow.php...

CVE-2006-2671

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

CVE-2006-2670

Multiple cross-site scripting XSS vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in 1 fastchat.php and 2 fastshow.php...

CVE-2006-2671

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

CVE-2006-2670

CVE-2006-2670 affects ChatPat 1.0. The description reports multiple XSS vulnerabilities that let remote attackers inject arbitrary script/HTML via chat messages in fastchat.php and fastshow.php. Affected component: ChatPat 1.0 web chat; root cause: input-derived script execution. Impact per NVD: ...

CVE-2006-2671

CVE-2006-2671 is a SQL injection vulnerability affecting ChatPat 1.0, allowing remote attackers to execute arbitrary SQL commands via the nickname field. The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low attack complexity, no authentication, and partial integrity im...

CVE-2006-2670

Multiple cross-site scripting XSS vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in 1 fastchat.php and 2 fastshow.php...

ChatPat v1.0

ChatPat v1.0 Homepage: http://calendarscripts.info/download-3.html Description: An online chat room that lets users chat with each other. Effected files: fastchat.php fastshow.php The nickname input form doesn't sanatize user input before it adds it to the db. In turn this can cause SQL query...