EUVD-2006-2669

Malware in sbrugna...

Sql injection

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in 1 fastchat.php and 2 fastshow.php...

CVE-2006-2671

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

CVE-2006-2670

Multiple cross-site scripting XSS vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in 1 fastchat.php and 2 fastshow.php...

CVE-2006-2671

SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...

CVE-2006-2670

CVE-2006-2670 affects ChatPat 1.0. The description reports multiple XSS vulnerabilities that let remote attackers inject arbitrary script/HTML via chat messages in fastchat.php and fastshow.php. Affected component: ChatPat 1.0 web chat; root cause: input-derived script execution. Impact per NVD: ...

CVE-2006-2671

CVE-2006-2671 is a SQL injection vulnerability affecting ChatPat 1.0, allowing remote attackers to execute arbitrary SQL commands via the nickname field. The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low attack complexity, no authentication, and partial integrity im...