Chatpat (Calendarscripts.com) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2006-05-30. Vendor: Calendarscripts.com.

CVEs of Chatpat

• CVE-2006-2671 - CVSS 5 (medium), 2006-05-30: SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field.
• CVE-2006-2670 - CVSS 5.8 (medium), 2006-05-30: Multiple cross-site scripting (XSS) vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in (1)…