Vulnerabilities > Chipmunk Scripts
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-02-24 | CVE-2006-7042 | Cross-Site Scripting vulnerability in Chipmunk Directory Cross-site scripting (XSS) vulnerability in directory/index.php in Chipmunk directory allows remote attackers to inject arbitrary web script or HTML via the start parameter. network chipmunk-scripts | 6.8 |
| 2006-06-02 | CVE-2006-2757 | Cross-Site Scripting vulnerability in Chipmunk Guestbook Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) start parameter in (a) index.php; (2) forumID parameter in index.php, (b) newtopic.php, and (c) reply.php; and (3) ID parameter to (d) edit.php. network chipmunk-scripts | 4.3 |
| 2006-04-11 | CVE-2006-1683 | SQL Injection vulnerability in Chipmunk Guestbook SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name. | 7.5 |
| 2006-01-03 | CVE-2006-0069 | HTML Injection vulnerability in Chipmunk Guestbook Homepage Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the homepage parameter. network chipmunk-scripts | 4.3 |
| 2005-05-02 | CVE-2005-0368 | SQL Injection vulnerability in CMScore Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to index.php, or (3) username parameter to authenticate.php. | 7.5 |