Vulnerabilities > Chipmunk Scripts > Chipmunk Guestbook

DATE CVE VULNERABILITY TITLE RISK
2009-03-02 CVE-2008-6368 SQL Injection vulnerability in Chipmunk Scripts Chipmunk Guestbook 1.4M
SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start parameter.
network
low complexity
chipmunk-scripts CWE-89
7.5
2006-06-02 CVE-2006-2757 Cross-Site Scripting vulnerability in Chipmunk Guestbook
Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) start parameter in (a) index.php; (2) forumID parameter in index.php, (b) newtopic.php, and (c) reply.php; and (3) ID parameter to (d) edit.php.
4.3
2006-04-11 CVE-2006-1683 SQL Injection vulnerability in Chipmunk Guestbook
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name.
network
low complexity
chipmunk-scripts
7.5
2006-01-03 CVE-2006-0069 HTML Injection vulnerability in Chipmunk Guestbook Homepage
Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the homepage parameter.
4.3