Chipmunk Blog - members.php Cross-Site Scripting

Chipmunk Blog - members.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

Chipmunk Blog - 'archive.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

Unfixed XSS vulnerability at www.chipmunk-scripts.com

Security researcher THEMILLER, has submitted on 22/06/2008 a cross-site-scripting XSS vulnerability affecting www.chipmunk-scripts.com, which at the time of submission ranked 104048 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It...

CVE-2006-7043

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blogger allow remote authenticated users to inject arbitrary web script or HTML via script tags in 1 posts and 2 profile names; and 3 a javascript URI in a URL argument in the photo gallery...

CVE-2006-7042

Cross-site scripting XSS vulnerability in directory/index.php in Chipmunk directory allows remote attackers to inject arbitrary web script or HTML via the start parameter...

CVE-2006-7043

CVE-2006-7043 describes multiple XSS vulnerabilities in Chipmunk Blogger. Remote authenticated users can inject arbitrary script/HTML via (1) posts, (2) profile names, and (3) a javascript: URI in a URL argument in the photo gallery. The NVD notes a low base score (3.5) with attack vector Network...

CVE-2006-7042

CVE-2006-7042 is an XSS vulnerability in Chipmunk’s directory/index.php where an attacker can inject arbitrary web script or HTML via the start parameter. The incident is described as a cross-site scripting issue in Chipmunk directory, with the vulnerable component being directory/index.php. The ...

CVE-2006-7043

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blogger allow remote authenticated users to inject arbitrary web script or HTML via script tags in 1 posts and 2 profile names; and 3 a javascript URI in a URL argument in the photo gallery...

CVE-2006-2757

Cross-site scripting XSS vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the 1 start parameter in a index.php; 2 forumID parameter in index.php, b newtopic.php, and c reply.php; and 3 ID parameter to d edit.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the 1 start parameter in a index.php; 2 forumID parameter in index.php, b newtopic.php, and c reply.php; and 3 ID parameter to d edit.php...

CVE-2006-2757

Cross-site scripting XSS vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the 1 start parameter in a index.php; 2 forumID parameter in index.php, b newtopic.php, and c reply.php; and 3 ID parameter to d edit.php...

CVE-2006-2757

CVE-2006-2757 is a Cross-site Scripting (XSS) vulnerability affecting Chipmunk guestbook. The issue allows remote attackers to inject arbitrary web script or HTML via multiple input points: (1) the start parameter in index.php; (2) the forumID parameter in index.php, newtopic.php, and reply.php; ...

Chipmunk Guestbook | SQL Injection

Chipmunk Guestbook SQL Injection Vulnerabilities SpC-x Credit : SpC-X Site : http://www.Cyber-security.org Code : http://www.site.com/path/index.php?start=SQL Example : http://www.chipmunk-scripts.com/guestbook/index.php?start=SQL /SpC-x -- Get your free email from http://mymail.bsdmail.com...

Xss exploit in Chipmunk directory

Xss exploit in Chipmunk directory forum type : Chipmunk directory bug found by : black-code team : site-down type : Xss black-code: codes : http://www.example.com/directory/index.php?catid=catid&start='scriptalert10/script path to admin login: http://www.xxx.com/path/admin All my respect to my...

Multiple Xss exploits in Chipmunk Board

Subject: Multiple Xss exploits in Chipmunk Board Date: 27 May 2006 10:51:30 -0000 Multiple Xss exploits in Chipmunk Board forum type : Chipmunk Board bug found by : black-code&sweet-devil team : site-down type : Xss black-code: codes :...

Chipmunk 1.4 - Guestbook index.php Cross-Site Scripting

Chipmunk 1.4 - Guestbook index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18118/info Chipmunk Guestbook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Chipmunk Directory - index.php Cross-Site Scripting

Chipmunk Directory - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18119/info Chipmunk Directory is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

Chipmunk 1.4 - 'Guestbook index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18118/info Chipmunk Guestbook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Chipmunk Guestbook 1.3 - index.php SQL Injection

Chipmunk Guestbook 1.3 - index.php SQL Injection source: https://www.securityfocus.com/bid/17483/info Chipmunk Guestbook is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...

Chipmunk Guestbook 1.3 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/17483/info Chipmunk Guestbook is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...