Chipmunk Scripts

15 CVEs across 7 Chipmunk Scripts products. Browse Chipmunk Scripts vulnerabilities, severities, and proof-of-concept exploits.

Chipmunk Scripts products with known CVEs

ProductCVEs
Chipmunk Guestbook5
Chipmunk Blogger4
Chipmunk Directory2
Chipmunk Cms1
Chipmunk Forum1
Chipmunk Topsites1
Cmscore1
Chipmunk Scripts CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-63682009-03-02SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start parameter.
CVE-2009-04032009-02-03SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the (1) username…
CVE-2009-03992009-02-03Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability…
CVE-2008-49212008-11-04board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request. NOTE: som…
CVE-2008-31862008-07-15Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrary web script or HTML via the membername…
CVE-2006-70432007-02-24Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blogger allow remote authenticated users to inject arbitrary web script or HTML via script tags…
CVE-2006-70422007-02-24Cross-site scripting (XSS) vulnerability in directory/index.php in Chipmunk directory allows remote attackers to inject arbitrary web script or HTML via the st…
CVE-2006-27572006-06-02Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) start parameter in (a…
CVE-2006-16832006-04-11SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication…
CVE-2006-00692006-01-03Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML v…
CVE-2005-35172005-11-06Chipmunk Scripts Guestbook allows remote attackers to obtain the installation path of the script via a URL that causes an error message to be displayed, such a…
CVE-2005-35162005-11-06Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to inject arbitrary web script or HTML via the e…
CVE-2005-35152005-11-06Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject arbitrary web script or HTML via the ID…
CVE-2005-35142005-11-06Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID para…
CVE-2005-03682005-05-02Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to i…