Chatelao

9 CVEs across 2 Chatelao products. Browse Chatelao vulnerabilities, severities, and proof-of-concept exploits.

Chatelao products with known CVEs

ProductCVEs
PHP Address Book8
PHP Address Book1
Chatelao CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-37083High8.22026-02-03PHP AddressBook 9.0.0.1 contains a time-based blind SQL injection vulnerability that allows remote attackers to manipulate database queries through the 'id' pa…
CVE-2013-17492013-04-18Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via…
CVE-2013-17482013-04-18Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edi…
CVE-2013-27782013-04-09Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authent…
CVE-2013-01352013-04-09Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) addressbo…
CVE-2012-19122012-09-09Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML…
CVE-2012-19112012-09-09Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group par…
CVE-2012-29032012-05-21Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (…
CVE-2009-26082009-07-27Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.ph…