Vulnerabilities > Chcounter
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-04-22 | CVE-2009-1362 | SQL Injection vulnerability in Chcounter 3.1.3 SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary SQL commands via the login_name parameter. | 6.8 |
| 2009-04-20 | CVE-2009-1347 | SQL Injection vulnerability in Chcounter 3.1.3 Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary SQL commands via (1) the login_name parameter (aka the username field) or (2) the login_pw parameter (aka the password field). | 6.8 |
| 2007-04-13 | CVE-2007-1871 | HTML Injection vulnerability in Chcounter 3.1.3 Cross-site scripting (XSS) vulnerability in chcounter 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the login_name parameter to /stats/. network chcounter | 4.3 |