Chipmunk Scripts - vulnerabilities (CVEs)
15 CVEs in 7 products, 0 in the last 30 days, newest from 2009-03-02.
Products
- Chipmunk Guestbook - 5 CVEs
- Chipmunk Blogger - 4 CVEs
- Chipmunk Directory - 2 CVEs
- Chipmunk Cms - 1 CVEs
- Chipmunk Forum - 1 CVEs
- Chipmunk Topsites - 1 CVEs
- Cmscore - 1 CVEs
Newest CVEs of Chipmunk Scripts
- CVE-2008-6368 - CVSS 7.5 (high), 2009-03-02: SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start parameter.
- CVE-2009-0403 - CVSS 7.5 (high), 2009-02-03: SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the (1)…
- CVE-2009-0399 - CVSS 7.5 (high), 2009-02-03: Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability…
- CVE-2008-4921 - CVSS 7.5 (high), 2008-11-04: board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE:…
- CVE-2008-3186 - CVSS 4.3 (medium), 2008-07-15: Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrary web script or HTML via the…
- CVE-2006-7043 - CVSS 3.5 (low), 2007-02-24: Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blogger allow remote authenticated users to inject arbitrary web script or HTML via script…
- CVE-2006-7042 - CVSS 6.8 (medium), 2007-02-24: Cross-site scripting (XSS) vulnerability in directory/index.php in Chipmunk directory allows remote attackers to inject arbitrary web script or HTML via the…
- CVE-2006-2757 - CVSS 4.3 (medium), 2006-06-02: Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) start parameter in…
- CVE-2006-1683 - CVSS 7.5 (high), 2006-04-11: SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication…
- CVE-2006-0069 - CVSS 4.3 (medium), 2006-01-03: Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML…
- CVE-2005-3515 - CVSS 4.3 (medium), 2005-11-06: Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject arbitrary web script or HTML via the…
- CVE-2005-3516 - CVSS 4.3 (medium), 2005-11-06: Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to inject arbitrary web script or HTML via the…
- CVE-2005-3517 - CVSS 5 (medium), 2005-11-06: Chipmunk Scripts Guestbook allows remote attackers to obtain the installation path of the script via a URL that causes an error message to be displayed, such…
- CVE-2005-3514 - CVSS 4.3 (medium), 2005-11-06: Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID…
- CVE-2005-0368 - CVSS 7.5 (high), 2005-05-02: Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to…
