CVE-2006-1962

CVE-2006-1962 affects PCPIN Chat 5.0.4 and earlier. The vulnerability is an SQL injection in the login path: user input in the username field (login parameter to main.php) can be manipulated to execute arbitrary SQL commands on the backend. This is exploitable remotely and can impact confidential...

CVE-2006-1963

CVE-2006-1963 affects PCPIN Chat 5.0.4 and earlier. A directory traversal flaw in main.php allows remote authenticated users to include and execute arbitrary PHP code by manipulating a language cookie (demonstrated via a smiliefile image that contains PHP code). The root cause is unsafely handlin...

CVE-2008-2485

The CVE-2008-2485 entry describes an XSS vulnerability in the PCPIN Chat application (before 6.11) via the URL redirection script inc/url_redirection.inc.php. The root cause is unspecified in the docs beyond a cross-site scripting flaw that allows remote attackers to inject arbitrary web script o...