CVE-2006-2671

CVE-2006-2671 is a SQL injection vulnerability affecting ChatPat 1.0, allowing remote attackers to execute arbitrary SQL commands via the nickname field. The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low attack complexity, no authentication, and partial integrity im...

CVE-2006-2670

CVE-2006-2670 affects ChatPat 1.0. The description reports multiple XSS vulnerabilities that let remote attackers inject arbitrary script/HTML via chat messages in fastchat.php and fastshow.php. Affected component: ChatPat 1.0 web chat; root cause: input-derived script execution. Impact per NVD: ...