Vulnerabilities > Cholod

DATE CVE VULNERABILITY TITLE RISK
2006-03-26 CVE-2006-1396 HTML Injection vulnerability in Cholod MySQL Based Message Board
Multiple cross-site scripting (XSS) vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
network
cholod
4.3
2006-03-26 CVE-2006-1395 SQL Injection vulnerability in Cholod MySQL Based Message Board Mb.CGI
SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter.
network
low complexity
cholod
7.5