Chatelao
9 CVEs across 2 Chatelao products. Browse Chatelao vulnerabilities, severities, and proof-of-concept exploits.
Chatelao products with known CVEs
Chatelao CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2020-37083 | High | 8.2 | 2026-02-03 | PHP AddressBook 9.0.0.1 contains a time-based blind SQL injection vulnerability that allows remote attackers to manipulate database queries through the 'id' pa… |
CVE-2013-1749 | | | 2013-04-18 | Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via… |
CVE-2013-1748 | | | 2013-04-18 | Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edi… |
CVE-2013-2778 | | | 2013-04-09 | Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authent… |
CVE-2013-0135 | | | 2013-04-09 | Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) addressbo… |
CVE-2012-1912 | | | 2012-09-09 | Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML… |
CVE-2012-1911 | | | 2012-09-09 | Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group par… |
CVE-2012-2903 | | | 2012-05-21 | Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (… |
CVE-2009-2608 | | | 2009-07-27 | Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.ph… |